mrcharles
163ef9de16
The KexAlgorithms line in ssh-audit-hardening.conf began with a space. In sshd_config a leading whitespace marks a line continuation, so the entire directive was absorbed as arguments to the (non-existent) previous directive. The effective kexalgorithms collapsed to only the two trailing GSSAPI entries (gss-curve25519-sha256-, gss-group16-sha512-), which no normal OpenSSH client can negotiate. Result: after secharden-ssh deployed this file, every SSH connection to the host died in [preauth] with no usable key exchange algorithm. sshd -t still returned 0, so the breakage was completely silent. Drop the leading space so the directive is parsed as intended. This restores normal client compatibility while keeping the hardened algorithm set. 🤖 Generated with [Crush](https://github.com/charmassociates/crush) Assisted-by: GLM-5 via Crush <crush@charm.land>
KNEL FetchApply
Repo Issues
https://projects.knownelement.com/project/reachableceo-vptechnicaloperations/timeline
Repo Discussion
https://community.turnsys.com/c/chieftechnologyandproductofficer/26
Repo discription
Known Element Enterprises (the entity serving as the TSYS Group management company) (through it’s executive leader, the COO) provides core IT/back office systems/services/support on a hands off/fully delegated authortity basis to the CCO and the orgs/members.
One of those functions is the provisoning of Linux servers. This repository is the Infrastructure As Code (IAC) repository for TSYS.
In the future it will be used via FetchApply https://github.com/P5vc/fetch-apply
Usage
git clone this repo cd FetchApply/ProjectCode bash SetupNewSystem.sh