<commit_before># Managed by CFEngine

Port 22
AddressFamily inet
Protocol 2

HostKey /etc/ssh/ssh_host_rsa_key

SyslogFacility AUTH

PermitRootLogin without-password
StrictModes yes
AuthorizedKeysFile .ssh/authorized_keys

PubkeyAuthentication yes
RSAAuthentication no
RhostsRSAAuthentication no
HostbasedAuthentication no
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
KerberosAuthentication no
GSSAPIAuthentication no
UsePAM yes

# Mustache derived section begin --------------------------------------------

{{#classes.amzn_2015_09}}
UsePrivilegeSeparation sandbox
{{/classes.amzn_2015_09}}
{{#classes.redhat_6}}
UsePrivilegeSeparation yes
{{/classes.redhat_6}}

# Mustache derived section end --------------------------------------------

Banner /etc/ssh/banner
PrintMotd yes

# Accept locale-related environment variables
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS

Subsystem sftp	/usr/libexec/openssh/sftp-server<commit_msg>Updated sshd_config to (in addition to RSA host keys) also support ECDSA and ED25519 host keys for Amazon Linux and RHEL 7.<commit_after># Managed by CFEngine

Port 22
AddressFamily inet
Protocol 2

SyslogFacility AUTH

PermitRootLogin without-password
StrictModes yes
AuthorizedKeysFile .ssh/authorized_keys

PubkeyAuthentication yes
RSAAuthentication no
RhostsRSAAuthentication no
HostbasedAuthentication no
PasswordAuthentication no
PermitEmptyPasswords no
ChallengeResponseAuthentication no
KerberosAuthentication no
GSSAPIAuthentication no
UsePAM yes

# Mustache derived section begin --------------------------------------------

{{#classes.amzn_2015_09}}
UsePrivilegeSeparation sandbox
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
{{/classes.amzn_2015_09}}

{{#classes.redhat_7}}
UsePrivilegeSeparation sandbox
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
{{/classes.redhat_7}}

{{#classes.redhat_6}}
UsePrivilegeSeparation yes
HostKey /etc/ssh/ssh_host_rsa_key
{{/classes.redhat_6}}

# Mustache derived section end --------------------------------------------

Banner /etc/ssh/banner
PrintMotd yes

# Accept locale-related environment variables
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS

Subsystem sftp	/usr/libexec/openssh/sftp-server
{'fraction_non_alphanumeric': 0.11273408239700375, 'fraction_numerical': 0.01947565543071161, 'mean_word_length': 4.530020703933747, 'pattern_counts': {'":': 0, '<': 3, '<?xml version=': 0, '>': 3, 'https://': 0, 'lorem ipsum': 0, 'www.': 0, 'xml': 0}, 'pii_count': 0, 'substrings_counts': 0, 'word_list_counts': {'cursed_substrings.json': 0, 'profanity_word_list.json': 0, 'sexual_word_list.json': 0, 'zh_pornsignals.json': 0}}
{'dir': 'git-commits-cleaned', 'id': '4443922', 'n_tokens_mistral': 939, 'n_tokens_neox': 843, 'n_words': 210}