sys-auth/google-oslogin: accept ssh-rsa in sshd_config for openssh 8.8

Temporarily accept ssh-rsa algorithm in sshd_config for openssh >= 8.8,
until most ssh clients could deprecate ssh-rsa.

It is the same fix as https://github.com/flatcar-linux/init/pull/54.
However, we should do that again for GCE, because the google-oslogin
ebuild overwrites the existing sshd_config.
This commit is contained in:
Dongsu Park 2021-12-13 14:52:01 +01:00
parent 1b9cb406f6
commit ac7e8b2232
2 changed files with 4 additions and 0 deletions

View File

@ -9,3 +9,7 @@ PrintMotd no # handled by PAM
# Needed for google oslogin # Needed for google oslogin
AuthorizedKeysCommand /usr/libexec/google_authorized_keys AuthorizedKeysCommand /usr/libexec/google_authorized_keys
AuthorizedKeysCommandUser root AuthorizedKeysCommandUser root
# Temporarily accept ssh-rsa algorithm for openssh >= 8.8,
# until most ssh clients could deprecate ssh-rsa.
HostkeyAlgorithms +ssh-rsa
PubkeyAcceptedAlgorithms +ssh-rsa