Skip to content

harden_sshd job from os-conf/22.1.1

Github source: a761b08 or master branch

Properties

allow_stream_local_forwarding

Specifies whether forwarding Unix domain sockets is permitted

Default
false

allow_tcp_forwarding

Specifies whether TCP forwarding is permitted

Default
false

gateway_ports

Specifies whether remote hosts are allowed to connect to ports forwarded for the client

Default
false

permit_tunnel

Specifies whether tun(4) device forwarding is allowed

Default
false

Templates

Templates are rendered and placed onto corresponding instances during the deployment process. This job's templates will be placed into /var/vcap/jobs/harden_sshd/ directory (learn more).

  • bin/pre-start (from pre-start.sh.erb)

Packages

Packages are compiled and placed onto corresponding instances during the deployment process. Packages will be placed into /var/vcap/packages/ directory.

This job relies on no runtime packages.