2.5.1

Changelog

2.5.1 (2020-05-18)

Full Changelog

Merged pull requests:

• Align versions everywhere in the project #159 (micheelengronne)

* This Changelog was automatically generated by github_changelog_generator

2.5.0

Changelog

2.5.0 (2020-05-18)

Full Changelog

Closed issues:

• Mozilla OpenSSH Guidelines #150
• Test SSHD running as another user #149
• New release #147
• Test for sha2 HMACs on RHEL 6 / CentOS 6 #145
• max_auth_tries is a string not numeric #139
• MaxAuthTries - Citation(s) for baseline choice. #137

Merged pull requests:

• API rate limiter debug #158 (micheelengronne)
• Release github workflow #157 (micheelengronne)
• In a container, sshd should not run as root #152 (micheelengronne)
• ubuntu versions #151 (micheelengronne)
• Use SHA2 HMACs in OpenSSH for RHEL family 6.5+ #146 (foonix)
• Support of CentOS 8 #143 (artem-sidorenko)
• Move atribute to spec as local var #142 (kiwivogel)
• Fix deprecations #141 (kiwivogel)
• Issue 139 - Use cmp instead of be matcher to allow string matching #140 (chbiel)
• Issue 137 - MaxAuthTries Parameter. #138 (monobaila)
• Debian 10 has Openssh 7.9 with deperecated UsePrivilegeSeparation #135 (artem-sidorenko)
• Debian 10 support for ciphers, kex, macs #134 (artem-sidorenko)

* This Changelog was automatically generated by github_changelog_generator

DevSec SSH Baseline 2.4.0

DevSec Hardening Framework project is releasing a new minor release of ssh-baseline 2.4.0 today.

The new release has improved support for the various Linux systems:

• Alpine linux #102
• Amazon Linux #117, #116
• Debian 9 #106
• Ubuntu Bionic #113, #104
• EL6 & OpenSuse Leap #109

Bugfixes and improvements:

• UseRoaming is only required on ssh versions < 7.2 #121, #122
• PermitRootLogin allows prohibit-password #123
• Improved operating system detection #120
• UseLogin is only required for ssh versions < 7.4 #114

Please checkout the full changelog and README for more details.

We are looking forward to get your feedback via our new mailing lists. Feel free to follow us on Twitter to stay updated.

DevSec SSH Baseline 2.3.0

2.3.0 (2017-12-01)

Full Changelog

Closed issues:

• OpenSSH 7.6 deprecated MACs #93

Merged pull requests:

• remove ripemd160 MAC from the macs66 list #94 (atomic111)
• use recommended spdx license identifier #90 (chris-rock)
• CI: update to ruby 2.4.1 and rubocop 0.49 #89 (artem-sidorenko)
• Support of OpenSuse Leap 42.2 #88 (artem-sidorenko)

DevSec SSH Baseline 2.1.0

2.2.0 (2017-05-08)

Full Changelog

Merged pull requests:

• update copyright name #87 (chris-rock)
• update metadata #86 (chris-rock)
• restrict ruby testing to version 2.3.3 and update gemfile #85 (atomic111)
• Proper tests for Opensuse leap 42.1 #84 (artem-sidorenko)
• Fix check for os.darwin #83 (techraf)
• Add openssh definitions for macos #82 (artem-sidorenko)
• Add support for oracle #80 (artem-sidorenko)
• Algorithm/Hostkey tests for different platforms #79 (artem-sidorenko)
• Test the strong DH primes #77 (artem-sidorenko)
• Removal of DSA key #76 (artem-sidorenko)
• Ignore inspec.lock file #73 (techraf)
• Remove the PAM deactivation enforcement #72 (artem-sidorenko)