Oefenweb / ansible-ssh-client

Ansible role to set up an OpenSSH client in Debian-like systems
MIT License
5 stars 2 forks source link

Added support for UseRoaming #5

Closed tersmitten closed 8 years ago

tersmitten commented 8 years ago

How To Patch and Protect OpenSSH Client Vulnerability CVE-0216-0777 and CVE-0216-0778 by adding use_roaming: false to ssh_client_default_configuration, like this:

ssh_client_default_configuration:
  - dest: /etc/ssh/ssh_config
    owner: root
    group: root
    hosts:
      - pattern: ['*']
        send_env: LANG LC_*
        hash_known_hosts: true
        gssapi_authentication: true
        gssapi_delegate_credentials: false
        use_roaming: false