From: Michael Tremer <michael.tremer@ipfire.org>
Date: Mon, 30 Jul 2018 15:54:50 +0000 (+0100)
Subject: aws: Disable SSH password authentication by default
X-Git-Tag: v2.21-core123~45
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=0cf70cae66593ce985d22b05d0be95c5b43b0565;p=ipfire-2.x.git

aws: Disable SSH password authentication by default

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/initscripts/helper/aws-setup b/src/initscripts/helper/aws-setup
index e16678339a..122e5a31dd 100644
--- a/src/initscripts/helper/aws-setup
+++ b/src/initscripts/helper/aws-setup
@@ -231,6 +231,9 @@ import_aws_configuration() {
 		# Enable SSH
 		sed -e "s/ENABLE_SSH=.*/ENABLE_SSH=on/g" -i /var/ipfire/remote/settings
 
+		# Disable SSH password authentication
+		sed -e "s/^ENABLE_SSH_PASSWORDS=.*/ENABLE_SSH_PASSWORDS=off/" -i /var/ipfire/remote/settings
+
 		# Enable SSH key authentication
 		sed -e "s/^ENABLE_SSH_KEYS=.*/ENABLE_SSH_KEYS=on/" -i /var/ipfire/remote/settings