sshd configuration

[mario-fink]

employ security hardening configuration options to sshd_config by:

• no root login -allow login only by users configured
• allow login only on local subnet
• etc.

[markope]

Probably login from anywhere will be required at some point as well. Markus from conti asked this right away. I would just put a basic sshd_config on the OS which is closed and secure by default. Any modification will be handled by the reswarm_agent.

[mario-fink]

By anywhere you mean from any "outside" network which is not the local/same network ? That's fine.. but the of course, this opens up a security hazard to some degree....Then we should probably set up public key authentication for the user...

[markope]

probably, but let's look at this again when we start with the reswarm_agent

[mario-fink]

disable password login and enable public key authentication only for user 'swarm_owner' with key/cert given in reswarm configuration file

[mario-fink]

82674cee237b64909770ded25243ec2d21554e97