[Midnightbsd-cvs] src [9231] stable/0.8/crypto/openssh: tweak some defaults

[laffer1 at midnightbsd.org]

Revision: 9231
          http://svnweb.midnightbsd.org/src/?rev=9231
Author:   laffer1
Date:     2016-11-10 21:25:49 -0500 (Thu, 10 Nov 2016)
Log Message:
-----------
tweak some defaults

Modified Paths:
--------------
    stable/0.8/crypto/openssh/ssh_config
    stable/0.8/crypto/openssh/sshd_config

Modified: stable/0.8/crypto/openssh/ssh_config
===================================================================
--- stable/0.8/crypto/openssh/ssh_config	2016-11-11 02:19:37 UTC (rev 9230)
+++ stable/0.8/crypto/openssh/ssh_config	2016-11-11 02:25:49 UTC (rev 9231)
@@ -17,7 +17,9 @@
 # list of available options, their meanings and defaults, please see the
 # ssh_config(5) man page.
 
-# Host *
+Host *
+UseRoaming no
+
 #   ForwardAgent no
 #   ForwardX11 no
 #   RhostsRSAAuthentication no

Modified: stable/0.8/crypto/openssh/sshd_config
===================================================================
--- stable/0.8/crypto/openssh/sshd_config	2016-11-11 02:19:37 UTC (rev 9230)
+++ stable/0.8/crypto/openssh/sshd_config	2016-11-11 02:25:49 UTC (rev 9231)
@@ -41,6 +41,7 @@
 
 #LoginGraceTime 2m
 #PermitRootLogin prohibit-password
+PermitRootLogin no
 #StrictModes yes
 #MaxAuthTries 6
 #MaxSessions 10
@@ -106,7 +107,7 @@
 #PrintLastLog yes
 #TCPKeepAlive yes
 #UseLogin no
-#UsePrivilegeSeparation sandbox
+UsePrivilegeSeparation sandbox
 #PermitUserEnvironment no
 #Compression delayed
 #ClientAliveInterval 0