openstack/tripleo-heat-templates
Code Issues Proposed changes

Remove deprecated UsePrivilegeSeparation option

Browse Source 
From https://www.openssh.com/releasenotes.html:

 * This release deprecates the sshd_config UsePrivilegeSeparation
   option, thereby making privilege separation mandatory. Privilege
   separation has been on by default for almost 15 years and
   sandboxing has been on by default for almost the last five.

Since master only targets CentOS 8 and onwards which has
openssh-8.0p1-4.el8 or later, we can safely remove this and get rid of
the following warning:
May 18 10:50:02 underCloud.localDomain sshd[131346]: rexec line 21: Deprecated option UsePrivilegeSeparation

Change-Id: Idff6074d8f01d6a5a784c42521f0cf9d7c6dfbf1
This commit is contained in:
Michele Baldessari 2020-05-18 15:48:30 +02:00
parent 0b992342dc
commit d6b2cfce61
1 changed files with 0 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
deployment/sshd/sshd-baremetal-puppet.yaml
View File

@ -52,7 +52,6 @@ parameters:
UsePAM: 'yes'
UseDNS: 'no'
X11Forwarding: 'yes'
UsePrivilegeSeparation: 'sandbox'
AcceptEnv:
- 'LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES'
- 'LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT'