Import hardening from simon

[dotfiles/ssh.git] / config

diff --git a/config b/config
index 135d637ead8ae0cfb797d49681a4a6a7af64c667..612ce859470b5613bbb549e8b346ca646fddfc45 100644 (file)
--- a/config
+++ b/config
@@ -1,3 +1,5 @@
+PermitLocalCommand no
+
 Host git.siccegge.de
        User git
        VerifyHostKeyDNS yes
@@ -37,4 +39,4 @@ MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,h
 KexAlgorithms diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org
 HostKeyAlgorithms ssh-ed25519,ssh-rsa
 FingerprintHash sha256
-Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr,aes256-cbc
+Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr