harden_sshd job from os-conf/22.1.1
Github source:
a761b08 or
master branch
Properties¶
allow_stream_local_forwarding¶
Specifies whether forwarding Unix domain sockets is permitted
- Default
false
allow_tcp_forwarding¶
Specifies whether TCP forwarding is permitted
- Default
false
gateway_ports¶
Specifies whether remote hosts are allowed to connect to ports forwarded for the client
- Default
false
permit_tunnel¶
Specifies whether tun(4) device forwarding is allowed
- Default
false
Templates¶
Templates are rendered and placed onto corresponding
instances during the deployment process. This job's templates
will be placed into /var/vcap/jobs/harden_sshd/ directory
(learn more).
bin/pre-start(frompre-start.sh.erb)
Packages¶
Packages are compiled and placed onto corresponding
instances during the deployment process. Packages will be
placed into /var/vcap/packages/ directory.
This job relies on no runtime packages.