fachinformatiker-wiki

it's easy when it's here

User Tools

Site Tools

Trace:
linux:remote_access:openssh

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revisionPrevious revision
Next revision		Previous revision
linux:remote_access:openssh [2024/03/12 16:30] – gsyslinux:remote_access:openssh [2026/03/12 20:37] (current) – [Regenerate Host Keys] gsys
Line 1: Line 1:
 ====== OpenSSH ====== ====== OpenSSH ======
  
 +===== Permissions =====
 +
 +<code>
 +^ File/Folder             ^ Numeric  ^ Bitwise    ^
 +| ~/.ssh                  | 700      | drwx------ |
 +| ~/.ssh/id_rsa.pub       | 644      | -rw-r--r-- |
 +| ~/.ssh/id_rsa           | 600      | -rw------- |
 +| ~/.ssh/authorized_keys  | 600      | -rw------- |
 +| ~/.ssh/config           | 600      | -rw------- |
 +</code>
 ===== Harden SSH Access ====== ===== Harden SSH Access ======
  
Line 34: Line 44:
 1. Regeneate Host Keys 1. Regeneate Host Keys
 <code> <code>
-sudo /bin/rm -v /etc/ssh/ssh_host_*        # delete old host keys +sudo rm -v /etc/ssh/ssh_host_*          # delete old host keys 
-sudo dpkg-reconfigure openssh-server       # create new set of keys+sudo dpkg-reconfigure openssh-server    # create new set of keys 
 +sudo systemctl restart sshd             # restart service
 </code> </code>
  
 2. Delete old Public Keys from clients known_hosts files 2. Delete old Public Keys from clients known_hosts files
linux/remote_access/openssh.1710257412.txt.gz · Last modified: by gsys