Skip to content

Commit 06e03c8

Browse files
committed
Only check UsePrivilegeSeparation if openssh < 7.5
OpenSSH hardcoded the `UsePrivilegeSeparation` option to `sandbox` in 7.5: Potentially-incompatible changes ================================ This release includes a number of changes that may affect existing configurations: * This release deprecates the sshd_config UsePrivilegeSeparation option, thereby making privilege separation mandatory. Privilege separation has been on by default for almost 15 years and sandboxing has been on by default for almost the last five. https://www.openssh.org/releasenotes.html Let's only check it if the ssh version is applicable.
1 parent c6fa6bc commit 06e03c8

File tree

1 file changed

+1
-0
lines changed
  • linux_os/guide/services/ssh/ssh_server/sshd_use_priv_separation

1 file changed

+1
-0
lines changed

linux_os/guide/services/ssh/ssh_server/sshd_use_priv_separation/rule.yml

Lines changed: 1 addition & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -52,3 +52,4 @@ template:
5252
parameter: UsePrivilegeSeparation
5353
xccdf_variable: var_sshd_priv_separation
5454
datatype: string
55+
obsolete_since_version: "7.5"

0 commit comments

Comments
 (0)