From 64b74deeb1cf1fc23d11d3f11b520425855e3d7f Mon Sep 17 00:00:00 2001 From: Xiao Pan Date: Mon, 31 Jul 2023 20:18:11 -0700 Subject: sshd_config use `AuthenticationMethods publickey` for redundancy, think about what if they changed some defaults auth method from no to yes --- etc/ssh/sshd_config | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/etc/ssh/sshd_config b/etc/ssh/sshd_config index fb66c21d..f66c0efd 100644 --- a/etc/ssh/sshd_config +++ b/etc/ssh/sshd_config @@ -114,3 +114,7 @@ Subsystem sftp /usr/lib/ssh/sftp-server # AllowTcpForwarding no # PermitTTY no # ForceCommand cvs server + +# Based on manpage, setting PasswordAuthentication no, and default KbdInteractiveAuthentication no, with other defaults seems already equivalent to AuthenticationMethods publickey, but I still put it here for redundancy. +# https://wiki.archlinux.org/title/OpenSSH#Force_public_key_authentication +AuthenticationMethods publickey -- cgit v1.2.3-70-g09d2