Skip to content

Duplicated SSH Config Directives #14

@grady

Description

@grady

The sshd configuration specified in entrypoint.sh sets up duplicate directives for MaxAuthTries and LoginGraceTime set.

echo "MaxAuthTries 5"
echo "LoginGraceTime 20"

# Brute force protection
echo "MaxSessions 10"
echo "MaxAuthTries 3"
echo "LoginGraceTime 15"

Given how sshd processes the config files, the first directive wins, and the less stringent values for these settings are enforced, which can be confirmed by running sshd -T inside the container.

I suggest removing the lines at 94-95 so that only the more stringent settings listed under the # Brute Force Protection section at line 115 are written to the config file and then enforced by sshd.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions