diff options
author | Levi Shafter <levi.shafter@elder-tomes.com> | 2025-08-21 12:40:40 -0600 |
---|---|---|
committer | Yi Zhao <yi.zhao@windriver.com> | 2025-09-18 10:22:56 +0800 |
commit | 0d24af93814ecceae7fb96ae18b310c9feaec265 (patch) | |
tree | bbcd9d5f904aabbb23fa03dd9bcae32843329ccb /dynamic-layers/python2-layer | |
parent | 6cf84fa126d42ed3a960e5dde05d41415d37ee9c (diff) | |
download | meta-selinux-0d24af93814ecceae7fb96ae18b310c9feaec265.tar.gz |
openssh: use config snippet instead of file
Config snippets should be used over file overrides since targeted
changes may be required in multiple recipes.
Since the oe-core sshd_config file now includes
/etc/ssh/sshd_config.d/*.conf, the meta-selinux configuration snippet
does not require the following:
* ChallengeResponseAutnetication: Replaced by
KbdInteractiveAuthentication and set to "no" by default
* Override default of no subsystems: This is already present
* Compression, ClientAliveInterval, and ClientAliveCountMax: No changes
required due to identical requirements of meta-selinux
Testing process:
* Pulled modified meta-selinux layer into Poky and included openssh
* Built core-image-sato and ran via qemu
* Verified /etc/ssh was as expected with an ssh_config.d directory with
the new selinux config snippet inside
* Verified system was including selinux config modification by running
sshd -T
Suggested-by: Clayton Casciato <majortomtosourcecontrol@gmail.com>
Signed-off-by: Levi Shafter <lshafter@21sw.us>
Signed-off-by: Yi Zhao <yi.zhao@windriver.com>
Diffstat (limited to 'dynamic-layers/python2-layer')
0 files changed, 0 insertions, 0 deletions