-
-
Notifications
You must be signed in to change notification settings - Fork 18
Open
Description
The sshd configuration specified in entrypoint.sh sets up duplicate directives for MaxAuthTries and LoginGraceTime set.
docker-ssh/src/rootfs/entrypoint.sh
Lines 94 to 95 in 8c8f3ee
| echo "MaxAuthTries 5" | |
| echo "LoginGraceTime 20" |
docker-ssh/src/rootfs/entrypoint.sh
Lines 115 to 118 in 8c8f3ee
| # Brute force protection | |
| echo "MaxSessions 10" | |
| echo "MaxAuthTries 3" | |
| echo "LoginGraceTime 15" |
Given how sshd processes the config files, the first directive wins, and the less stringent values for these settings are enforced, which can be confirmed by running sshd -T inside the container.
I suggest removing the lines at 94-95 so that only the more stringent settings listed under the # Brute Force Protection section at line 115 are written to the config file and then enforced by sshd.
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
No labels