Import hardening from simon

[dotfiles/ssh.git] / config

diff --git a/config b/config
index c56485dd4695b248411ed62bb124fddf90a20327..612ce859470b5613bbb549e8b346ca646fddfc45 100644 (file)
--- a/config
+++ b/config
@@ -1,11 +1,4 @@
-HashKnownHosts no
-ServerAliveInterval 300
-ControlMaster=auto
-MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512
-KexAlgorithms diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org
-HostKeyAlgorithms ssh-ed25519,ssh-rsa
-FingerprintHash sha256
-Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr
+PermitLocalCommand no
 
 Host git.siccegge.de
        User git
@@ -38,3 +31,12 @@ Host *.sieglitzhof.net
 
 Host *.faust.ninja
        VerifyHostKeyDNS yes
+
+HashKnownHosts no
+ServerAliveInterval 300
+ControlMaster auto
+MACs hmac-sha2-256-etm@openssh.com,hmac-sha2-512-etm@openssh.com,hmac-sha2-256,hmac-sha2-512
+KexAlgorithms diffie-hellman-group-exchange-sha256,curve25519-sha256@libssh.org
+HostKeyAlgorithms ssh-ed25519,ssh-rsa
+FingerprintHash sha256
+Ciphers chacha20-poly1305@openssh.com,aes256-gcm@openssh.com,aes256-ctr