adoptium / adoptium/infrastructure

Evaluate use of `PerSource*` options for sshd

Open
#3,856 0 comments 0 reactions 0 assignees View on GitHub
secure-dev
Dominant language
Python
Stars
96
Forks
106
Avg merge
1d 23h
Merged PRs (30d)
13

Description

A series of `PerSource` directives was introduced in OpenSSH 9.8 for blocking repeated connection attempts. We should evaluate these options and set them up on our machines to attempt to mitigate denial-of-service attempts on our machines where a suitable version is available.

Ref: https://www.openssh.com/txt/release-9.8 and the details in https://man.openbsd.org/sshd_config (That openbsd page is linked from the official openssh site)

Contributor guide

Open the contributing guide

Research direction

Start with the OpenSSH 9.8 release notes and the sshd_config manual linked in the issue, then identify which machines have a suitable version. Done means the applicable PerSource options have been evaluated and configured on eligible machines, with any unsupported machines accounted for.

Written by the indexing model from the issue text.

Assessment

Domain
infrastructure, security
Issue type
Feature
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.