d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Turn off ChallengeResponseAuthentication for EC2 AMIs, one of EC2's

Browse Source 
requirements.

MFC after:	3 days
Sponsored by:	The FreeBSD Foundation
This commit is contained in:
Glen Barber 2017-07-28 18:27:30 +00:00
parent 4b5e2f8ea0
commit 5941ae31e0
Notes: svn2git 2020-12-20 02:59:44 +00:00 
svn path=/head/; revision=321659
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
release/tools/ec2.conf
View File

@ -81,6 +81,12 @@ vm_extra_pre_umount() {
# Load the kernel module for the Amazon "Elastic Network Adapter"
echo 'if_ena_load="YES"' >> ${DESTDIR}/boot/loader.conf
# Disable ChallengeResponseAuthentication according to EC2
# requirements.
sed -i '' -e \
's/^#ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' \
${DESTDIR}/etc/ssh/sshd_config
# The first time the AMI boots, the installed "first boot" scripts
# should be allowed to run:
# * ec2_configinit (download and process EC2 user-data)