75d5d12d04
Add charmhelpers.contrib.hardening and calls to install, config-changed, upgrade-charm and update-status hooks. Also add new config option to allow one or more hardening modules to be applied at runtime. Change-Id: I4b1d6a23672eed0eb669970e107920d86218684f
43 lines
852 B
Plaintext
43 lines
852 B
Plaintext
# NOTE: this schema must contain all valid keys from it's associated defaults
|
|
# file. It is used to validate user-provided overrides.
|
|
common:
|
|
service_name:
|
|
network_ipv6_enable:
|
|
ports:
|
|
remote_hosts:
|
|
client:
|
|
package:
|
|
cbc_required:
|
|
weak_hmac:
|
|
weak_kex:
|
|
roaming:
|
|
password_authentication:
|
|
server:
|
|
host_key_files:
|
|
cbc_required:
|
|
weak_hmac:
|
|
weak_kex:
|
|
allow_root_with_key:
|
|
allow_tcp_forwarding:
|
|
allow_agent_forwarding:
|
|
allow_x11_forwarding:
|
|
use_privilege_separation:
|
|
listen_to:
|
|
use_pam:
|
|
package:
|
|
password_authentication:
|
|
alive_interval:
|
|
alive_count:
|
|
sftp_enable:
|
|
sftp_group:
|
|
sftp_chroot:
|
|
deny_users:
|
|
allow_users:
|
|
deny_groups:
|
|
allow_groups:
|
|
print_motd:
|
|
print_last_log:
|
|
use_dns:
|
|
max_auth_tries:
|
|
max_sessions:
|