)]}'
{"doc/metadata/rhel7/RHEL-07-010441.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PermitUserEnvironment`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_13ac6d9f","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PermitUserEnvironment`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b39bc171","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"ssh is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"6faf24f8d31f2b5ceeb68ed905310ca4b51f15da","unresolved":false,"context_lines":[{"line_number":7,"context_line":"The ``PermitUserEnvironment`` configuration is set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd is restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":".. code-block:: yaml"},{"line_number":13,"context_line":""}],"source_content_type":"text/x-rst","patch_set":6,"id":"9a629dbe_fc123356","line":10,"updated":"2016-11-09 22:00:05.000000000","message":"nit: don\u0027t need a hyphen in \"opt-out\"","commit_id":"652c449b2802fdfd84f4c4d599844e1120943293"}],"doc/metadata/rhel7/RHEL-07-010442.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``HostbasedAuthentication`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_537d051b","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set to","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``HostbasedAuthentication`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d38f5521","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040110.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Ciphers`` configuration will be set to"},{"line_number":8,"context_line":"``aes128-ctr,aes192-ctr,aes256-ctr`` in ``/etc/ssh/sshd_config`` and sshd will"},{"line_number":9,"context_line":"be restarted."},{"line_number":10,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_339df159","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Ciphers`` configuration will be set to"},{"line_number":8,"context_line":"``aes128-ctr,aes192-ctr,aes256-ctr`` in ``/etc/ssh/sshd_config`` and sshd will"},{"line_number":9,"context_line":"be restarted."},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"Deployers can change the list of ciphers by setting the following Ansible"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_739f6950","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040170.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Banner`` configuration will be set to ``/etc/issue.net`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted. In addition, the"},{"line_number":9,"context_line":"``files/login_banner.txt`` will be copied from the openstack- ansible-security"},{"line_number":10,"context_line":"role directory to ``/etc/issue.net`` on each host."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_13b1cde1","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Banner`` configuration will be set to ``/etc/issue.net`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted. In addition, the"},{"line_number":9,"context_line":"``files/login_banner.txt`` will be copied from the openstack- ansible-security"},{"line_number":10,"context_line":"role directory to ``/etc/issue.net`` on each host."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d3dd9515","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Banner`` configuration will be set to ``/etc/issue.net`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted. In addition, the"},{"line_number":9,"context_line":"``files/login_banner.txt`` will be copied from the openstack- ansible-security"},{"line_number":10,"context_line":"role directory to ``/etc/issue.net`` on each host."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b3d741ec","line":9,"updated":"2016-11-08 21:50:29.000000000","message":"file is copied","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":12402,"name":"Robb Romans","email":"robb.romans@rackspace.com","username":"rromans"},"change_message_id":"6faf24f8d31f2b5ceeb68ed905310ca4b51f15da","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Banner`` configuration is set to ``/etc/issue.net`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd is restarted. In addition, the"},{"line_number":9,"context_line":"``files/login_banner.txt`` file is copied from the openstack- ansible-security"},{"line_number":10,"context_line":"role directory to ``/etc/issue.net`` on each host."}],"source_content_type":"text/x-rst","patch_set":6,"id":"9a629dbe_5c287f86","line":9,"updated":"2016-11-09 22:00:05.000000000","message":"rm extra space","commit_id":"652c449b2802fdfd84f4c4d599844e1120943293"}],"doc/metadata/rhel7/RHEL-07-040190.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``ClientAliveInterval`` configuration will be set to ``600`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the length of the interval by changing the following"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f307f97e","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``ClientAliveInterval`` configuration will be set to ``600`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the length of the interval by changing the following"},{"line_number":11,"context_line":"Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_53f9857f","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session will be disconnected"},{"line_number":23,"context_line":"    if it is idle for 10 minutes."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_934a3dc4","line":22,"updated":"2016-11-08 21:50:29.000000000","message":", which means that the session is disconnected","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":18784,"name":"Michael Carden","email":"mike.carden@gmail.com","username":"mcarden"},"change_message_id":"d69c5534543b654cf714696d28a2e8a849cd53c6","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax``, which means that the session is disconnected"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_2fcbbd73","line":19,"updated":"2016-11-09 03:25:47.000000000","message":"I don\u0027t think these multiply to get the timeout. The ClientAliveInterval is the timeout (as you say, 600 seconds is 10 minutes) but the ClientAliveCountMax is the number of times the server will say \"Hey, are you there?\" to the client, which if set to zero, means that the ClientAliveInterval all by itself sets the timeout. If they *did* multiply... 600 x 0 \u003d\u003d 0.","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e127f6ef8564512e45aa531bf689a9aa7f035661","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax``, which means that the session is disconnected"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_8f7a09f0","line":19,"in_reply_to":"9a629dbe_2fcbbd73","updated":"2016-11-09 03:39:09.000000000","message":"Done","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"eaf16b3da9095d70ef4789296520cbd7e5cea0d9","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":5,"id":"9a629dbe_2083b557","line":24,"updated":"2016-11-09 14:48:59.000000000","message":"daemon waits","commit_id":"199bf2e058d006bb4bce9d00670ebf8bf1c8bef4"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"eaf16b3da9095d70ef4789296520cbd7e5cea0d9","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040191` to customize the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"9a629dbe_e091bd9a","line":26,"updated":"2016-11-09 14:48:59.000000000","message":"messages are sent","commit_id":"199bf2e058d006bb4bce9d00670ebf8bf1c8bef4"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"28a87e877dbb82560d0a5e9cba00c6fa621f9744","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_f8a688ac","line":24,"updated":"2016-11-10 22:29:30.000000000","message":"Done","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"e717bca1bb98f09bd13d2e53a67459dd5a12b21d","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_7e043749","line":24,"updated":"2016-11-10 14:31:32.000000000","message":"daemon waits","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"28a87e877dbb82560d0a5e9cba00c6fa621f9744","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040191` to customize the"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_18a25c99","line":26,"updated":"2016-11-10 22:29:30.000000000","message":"Done","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"e717bca1bb98f09bd13d2e53a67459dd5a12b21d","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040191` to customize the"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_3eb47f80","line":26,"updated":"2016-11-10 14:31:32.000000000","message":"messages are sent","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"}],"doc/metadata/rhel7/RHEL-07-040191.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``ClientAliveCountMax`` configuration will be set to ``0`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the maximum amount of client alive intervals by changing"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f315399b","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``ClientAliveCountMax`` configuration will be set to ``0`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the maximum amount of client alive intervals by changing"},{"line_number":11,"context_line":"the following Ansible variable."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_5327c511","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session will be disconnected"},{"line_number":23,"context_line":"    if it is idle for 10 minutes."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_13846dd2","line":22,"updated":"2016-11-08 21:50:29.000000000","message":", which means that the session is disconnected","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":18784,"name":"Michael Carden","email":"mike.carden@gmail.com","username":"mcarden"},"change_message_id":"d69c5534543b654cf714696d28a2e8a849cd53c6","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session is disconnected"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_ef13850b","line":19,"updated":"2016-11-09 03:25:47.000000000","message":"I don\u0027t think these multiply to get the timeout. The ClientAliveInterval is the timeout (as you say, 600 seconds is 10 minutes) but the ClientAliveCountMax is the number of times the server will say \"Hey, are you there?\" to the client, which if set to zero, means that the ClientAliveInterval all by itself sets the timeout. If they *did* multiply... 600 x 0 \u003d\u003d 0.","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e127f6ef8564512e45aa531bf689a9aa7f035661","unresolved":false,"context_lines":[{"line_number":16,"context_line":""},{"line_number":17,"context_line":".. note::"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session is disconnected"}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_cf8401d6","line":19,"in_reply_to":"9a629dbe_ef13850b","updated":"2016-11-09 03:39:09.000000000","message":"Done","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"2ef039b9b18030c6c2feb0fe8a53f4c746a97986","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session is disconnected"},{"line_number":23,"context_line":"    if it is idle for 10 minutes."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_690f7a2e","line":22,"updated":"2016-11-08 22:10:56.000000000","message":", which","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e127f6ef8564512e45aa531bf689a9aa7f035661","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    The length of the timeout on an ssh session is calculated by multiplying"},{"line_number":20,"context_line":"    the ``ClientAliveInterval`` by ``ClientAliveCountMax``.  The STIG"},{"line_number":21,"context_line":"    requirement is ``600`` for the ``ClientAliveInterval`` and ``0`` for"},{"line_number":22,"context_line":"    ``ClientAliveCountMax`` which means that the session is disconnected"},{"line_number":23,"context_line":"    if it is idle for 10 minutes."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_ef8705d5","line":22,"in_reply_to":"9a629dbe_690f7a2e","updated":"2016-11-09 03:39:09.000000000","message":"Done","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"eaf16b3da9095d70ef4789296520cbd7e5cea0d9","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":5,"id":"9a629dbe_e0bffdf8","line":24,"updated":"2016-11-09 14:48:59.000000000","message":"daemon waits","commit_id":"199bf2e058d006bb4bce9d00670ebf8bf1c8bef4"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"eaf16b3da9095d70ef4789296520cbd7e5cea0d9","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040190` to customize the"}],"source_content_type":"text/x-rst","patch_set":5,"id":"9a629dbe_c047591b","line":26,"updated":"2016-11-09 14:48:59.000000000","message":"messages are sent","commit_id":"199bf2e058d006bb4bce9d00670ebf8bf1c8bef4"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"28a87e877dbb82560d0a5e9cba00c6fa621f9744","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_b898906b","line":24,"updated":"2016-11-10 22:29:30.000000000","message":"Done","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"e717bca1bb98f09bd13d2e53a67459dd5a12b21d","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    timeout. If no data is transferred in a 10 minute period, the session is"},{"line_number":22,"context_line":"    disconnected."},{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_092dc794","line":24,"updated":"2016-11-10 14:31:32.000000000","message":"daemon waits","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"28a87e877dbb82560d0a5e9cba00c6fa621f9744","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040190` to customize the"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_d89b8464","line":26,"updated":"2016-11-10 22:29:30.000000000","message":"Done","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"e717bca1bb98f09bd13d2e53a67459dd5a12b21d","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"    The ``ClientAliveInterval`` specifies how long the ssh daemon will wait"},{"line_number":25,"context_line":"    before it sends a message to the client to see if it is still alive. The"},{"line_number":26,"context_line":"    ``ClientAliveCountMax`` specifies how many of these messages will be sent"},{"line_number":27,"context_line":"    without receiving a response."},{"line_number":28,"context_line":""},{"line_number":29,"context_line":"    Deployers should refer to :ref:`stig-RHEL-07-040190` to customize the"}],"source_content_type":"text/x-rst","patch_set":8,"id":"9a629dbe_a9493b62","line":26,"updated":"2016-11-10 14:31:32.000000000","message":"messages are sent","commit_id":"79d1c3ede0ba41564d7b8ef369be45f167e2c3c5"}],"doc/metadata/rhel7/RHEL-07-040301.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PrintLastLog`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_93787df4","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PrintLastLog`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d3603538","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040310.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PermitRootLogin`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_5355054e","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``PermitRootLogin`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f3ca9919","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    Ensure that a regular user account exists with a pathway to root access"},{"line_number":19,"context_line":"    (preferably via ``sudo``) before applying the security role.  This"},{"line_number":20,"context_line":"    configuration change will disallow any direct logins with the ``root``"},{"line_number":21,"context_line":"    user."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d3ee758a","line":20,"updated":"2016-11-08 21:50:29.000000000","message":"configuration change disallows","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040332.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``IgnoreUserKnownHosts`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_33ec118f","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``IgnoreUserKnownHosts`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_53034542","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040334.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``IgnoreRhosts`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b38f41cb","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``IgnoreRhosts`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f3bff95d","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040490.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Protocol`` configuration will be set to ``2`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_33ba516f","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Protocol`` configuration will be set to ``2`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b3a66151","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":".. warning::"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    There should be no reason to enable any other protocol than SSHv2."},{"line_number":19,"context_line":"    SSHv1 has multiple vulnerabilities and it is no longer widely used."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_337171e1","line":18,"updated":"2016-11-08 21:50:29.000000000","message":"There is no reason","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":16,"context_line":".. warning::"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    There should be no reason to enable any other protocol than SSHv2."},{"line_number":19,"context_line":"    SSHv1 has multiple vulnerabilities and it is no longer widely used."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_93823d93","line":19,"updated":"2016-11-08 21:50:29.000000000","message":"vulnerabilities, and it","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040540.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``X11Forwarding`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_f34d399a","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``X11Forwarding`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_13454d6f","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040620.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``MACs`` configuration will be set to ``hmac-sha2-256,hmac-sha2-512`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the allowed Message Authentication Codes (MACs) by setting"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_735a0952","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``MACs`` configuration will be set to ``hmac-sha2-256,hmac-sha2-512`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can adjust the allowed Message Authentication Codes (MACs) by setting"},{"line_number":11,"context_line":"the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_93595d5d","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040670.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``KerberosAuthentication`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_333fb1d7","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``KerberosAuthentication`` configuration will be set to ``no`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_b32bc193","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040680.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``StrictModes`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_d3183587","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``StrictModes`` configuration will be set to ``yes`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_530d053d","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040690.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: sshd"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``UsePrivilegeSeparation`` configuration will be set to ``sandbox`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_4e147c43","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``UsePrivilegeSeparation`` configuration will be set to ``sandbox`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can opt-out of this change by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_ae19987b","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":16,"context_line":".. note::"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    Although the STIG requires this setting to be ``yes``, the ``sandbox``"},{"line_number":19,"context_line":"    setting actually provides more security since it enables privilege"},{"line_number":20,"context_line":"    separation during the early authentication process."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_2e24a8ad","line":19,"updated":"2016-11-08 21:50:29.000000000","message":"security because it","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"}],"doc/metadata/rhel7/RHEL-07-040700.rst":[{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":4,"context_line":"tag: implemented"},{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Compression`` configuration will be set to ``delayed`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can choose another option by setting the following Ansible variable:"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_8e35b4db","line":7,"updated":"2016-11-08 21:50:29.000000000","message":"configuration is set","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":5,"context_line":"---"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"The ``Compression`` configuration will be set to ``delayed`` in"},{"line_number":8,"context_line":"``/etc/ssh/sshd_config`` and sshd will be restarted."},{"line_number":9,"context_line":""},{"line_number":10,"context_line":"Deployers can choose another option by setting the following Ansible variable:"},{"line_number":11,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_ae30b8e9","line":8,"updated":"2016-11-08 21:50:29.000000000","message":"sshd is restarted.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":15,"context_line":""},{"line_number":16,"context_line":".. note::"},{"line_number":17,"context_line":""},{"line_number":18,"context_line":"    There are three available settings for ``Compression`` in the ssh"},{"line_number":19,"context_line":"    configuration file:"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"    * ``delayed``: compression is enabled after authentication"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_4e42bc3f","line":18,"updated":"2016-11-08 21:50:29.000000000","message":"Following are the available settings","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":18,"context_line":"    There are three available settings for ``Compression`` in the ssh"},{"line_number":19,"context_line":"    configuration file:"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"    * ``delayed``: compression is enabled after authentication"},{"line_number":22,"context_line":"    * ``no``: compression is disabled"},{"line_number":23,"context_line":"    * ``yes``: enable it during authentication and during the session (not"},{"line_number":24,"context_line":"      allowed by the STIG)"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_ee77109d","line":21,"updated":"2016-11-08 21:50:29.000000000","message":"Compression is enabled after authentication.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":19,"context_line":"    configuration file:"},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"    * ``delayed``: compression is enabled after authentication"},{"line_number":22,"context_line":"    * ``no``: compression is disabled"},{"line_number":23,"context_line":"    * ``yes``: enable it during authentication and during the session (not"},{"line_number":24,"context_line":"      allowed by the STIG)"},{"line_number":25,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_8e63f4db","line":22,"updated":"2016-11-08 21:50:29.000000000","message":"Compression is disabled.","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":20,"context_line":""},{"line_number":21,"context_line":"    * ``delayed``: compression is enabled after authentication"},{"line_number":22,"context_line":"    * ``no``: compression is disabled"},{"line_number":23,"context_line":"    * ``yes``: enable it during authentication and during the session (not"},{"line_number":24,"context_line":"      allowed by the STIG)"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    The ``delayed`` option balances security with performance and is an"}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_8eba1422","line":23,"updated":"2016-11-08 21:50:29.000000000","message":"Compression is enabled during","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"bcc340a85668542c57714f8a2848b3662c346fd0","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    * ``delayed``: compression is enabled after authentication"},{"line_number":22,"context_line":"    * ``no``: compression is disabled"},{"line_number":23,"context_line":"    * ``yes``: enable it during authentication and during the session (not"},{"line_number":24,"context_line":"      allowed by the STIG)"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    The ``delayed`` option balances security with performance and is an"},{"line_number":27,"context_line":"    approved option in the STIG."}],"source_content_type":"text/x-rst","patch_set":3,"id":"9a629dbe_aeb51832","line":24,"updated":"2016-11-08 21:50:29.000000000","message":"the STIG).","commit_id":"224383c3eff6e35599a3bc205080a32e02ecbdd9"},{"author":{"_account_id":8803,"name":"Catherine Richardson","email":"catherine.richardson@rackspace.com","username":"cyrichardson"},"change_message_id":"2ef039b9b18030c6c2feb0fe8a53f4c746a97986","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    * ``delayed``: Compression is enabled after authentication."},{"line_number":22,"context_line":"    * ``no``: Compression is disabled."},{"line_number":23,"context_line":"    * ``yes``: Compression is enabled during authentication and during the"},{"line_number":24,"context_line":"      session (not allowed by the STIG)"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    The ``delayed`` option balances security with performance and is an"},{"line_number":27,"context_line":"    approved option in the STIG."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_4e0d5c3d","line":24,"updated":"2016-11-08 22:10:56.000000000","message":"STIG).","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"},{"author":{"_account_id":538,"name":"Major Hayden","email":"major@mhtx.net","username":"rackerhacker"},"change_message_id":"e127f6ef8564512e45aa531bf689a9aa7f035661","unresolved":false,"context_lines":[{"line_number":21,"context_line":"    * ``delayed``: Compression is enabled after authentication."},{"line_number":22,"context_line":"    * ``no``: Compression is disabled."},{"line_number":23,"context_line":"    * ``yes``: Compression is enabled during authentication and during the"},{"line_number":24,"context_line":"      session (not allowed by the STIG)"},{"line_number":25,"context_line":""},{"line_number":26,"context_line":"    The ``delayed`` option balances security with performance and is an"},{"line_number":27,"context_line":"    approved option in the STIG."}],"source_content_type":"text/x-rst","patch_set":4,"id":"9a629dbe_0f6fd92b","line":24,"in_reply_to":"9a629dbe_4e0d5c3d","updated":"2016-11-09 03:39:09.000000000","message":"Done","commit_id":"2f7e9dd17489d3d020495315ea21feae0fdba5c1"}]}