ansible-hardening/doc/metadata/rhel7/V-72243.rst

---id: V-72243 status: implemented tag: sshd ---

The IgnoreRhosts configuration is set to yes in /etc/ssh/sshd_config and sshd is restarted.

Deployers can opt out of this change by setting the following Ansible variable:

security_sshd_disallow_rhosts_auth: no