[Ach] More OpenSSH Hardening

[Axel Hübl]

Hi,

I just found
  https://stribika.github.io/2015/01/04/secure-secure-shell.html

with quite clear explanations.

Especially I didn't realize there is a /etc/ssh/moduli file for the DH
params in OpenSSH - we might want to add that, too.


Axel

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 949 bytes
Desc: OpenPGP digital signature
URL: <http://lists.cert.at/pipermail/ach/attachments/20150107/4d651e67/attachment.sig>