[yocto] [PATCH][meta-selinux] openssh: set ChallengeResponseAuthentication to no

wenzong.fan at windriver.com wenzong.fan at windriver.com
Sun Nov 1 17:38:03 PST 2015


From: Wenlin Kang <wenlin.kang at windriver.com>

The patch fixes the login fails for ssh -o Batchmode=yes when passwords is
empty and without authorized_keys file even if set "PermitEmptyPasswords yes"
in sshd_config file.

Signed-off-by: Wenlin Kang <wenlin.kang at windriver.com>
Signed-off-by: Wenzong Fan <wenzong.fan at windriver.com>
---
 recipes-connectivity/openssh/files/sshd_config | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/recipes-connectivity/openssh/files/sshd_config b/recipes-connectivity/openssh/files/sshd_config
index c5c0905..2110463 100644
--- a/recipes-connectivity/openssh/files/sshd_config
+++ b/recipes-connectivity/openssh/files/sshd_config
@@ -62,7 +62,7 @@ Protocol 2
 #PermitEmptyPasswords no
 
 # Change to no to disable s/key passwords
-#ChallengeResponseAuthentication yes
+ChallengeResponseAuthentication no
 
 # Kerberos options
 #KerberosAuthentication no
-- 
1.9.1




More information about the yocto mailing list