Merge pull request #234 from ankitkasera1/master

Adding attribute for max_startups value to custom from parent cookbooks
dev-sec · May 17, 2024 · a554623 · a554623
2 parents f425e49 + 0769a28
commit a554623
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 1 deletion.
diff --git a/attributes/default.rb b/attributes/default.rb
@@ -113,6 +113,7 @@
   server['login_grace_time']         = '30s'
   server['max_auth_tries']           = 2
   server['max_sessions']             = 10
+  server['max_startups']             = '10:30:100'
   server['password_authentication']  = false
   server['log_level']                = 'verbose'
   server['accept_env']               = ['LANG', 'LC_*', 'LANGUAGE']

diff --git a/templates/default/opensshd.conf.erb b/templates/default/opensshd.conf.erb
@@ -95,7 +95,7 @@ PermitUserEnvironment no
 LoginGraceTime <%= @node['ssh-hardening']['ssh']['server']['login_grace_time'] %>
 MaxAuthTries <%= @node['ssh-hardening']['ssh']['server']['max_auth_tries'] %>
 MaxSessions <%= @node['ssh-hardening']['ssh']['server']['max_sessions'] %>
-MaxStartups 10:30:100
+MaxStartups <%= @node['ssh-hardening']['ssh']['server']['max_startups'] %>
 
 # Enable public key authentication
 PubkeyAuthentication yes