release: Remove references to ChallengeResponseAuthentication
This sshd_config keyword was replaced by KbdInteractiveAuthentication in openssh 8.7, though ChallengeResponseAuthentication is silently accepted as an alias. However, this means that the code in ec2.conf which modifies a commented-out line no longer does anything. Apply a minimal fix. Reviewed by: cperciva, emaste MFC after: 1 week Sponsored by: The FreeBSD Foundation Differential Revision: https://reviews.freebsd.org/D34400
This commit is contained in:
parent
4be7d087c2
commit
c1b656ac55
@ -122,10 +122,9 @@ EOF
|
||||
# historical "nvd" driver.
|
||||
echo 'hw.nvme.use_nvd="0"' >> ${DESTDIR}/boot/loader.conf
|
||||
|
||||
# Disable ChallengeResponseAuthentication according to EC2
|
||||
# requirements.
|
||||
# Disable KbdInteractiveAuthentication according to EC2 requirements.
|
||||
sed -i '' -e \
|
||||
's/^#ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' \
|
||||
's/^#KbdInteractiveAuthentication yes/KbdInteractiveAuthentication no/' \
|
||||
${DESTDIR}/etc/ssh/sshd_config
|
||||
|
||||
# Use FreeBSD Update and Portsnap mirrors hosted in AWS
|
||||
|
@ -70,7 +70,7 @@ EOF
|
||||
EOF
|
||||
|
||||
cat << EOF >> ${DESTDIR}/etc/ssh/sshd_config
|
||||
ChallengeResponseAuthentication no
|
||||
KbdInteractiveAuthentication no
|
||||
X11Forwarding no
|
||||
AcceptEnv LANG
|
||||
AllowAgentForwarding no
|
||||
|
Loading…
Reference in New Issue
Block a user