Config in sshd_config is changed after update

Security
1

I have changed port and permitroot to other values than in /etc/ssh/sshd_config

After update to a new version this configs are reset to their default values.

Is it possible to have own settings?

2

Where did you change these values if not in the config file?

3

I made the my changes in /etc/ssh/sshd_config

After installing an ipfire-coreupdate all my config changes int sshd_config are lost.

This behavior is not new, it has been their since a lot of updates. But now I’m in addition to permitroot etc changing the port. And after the coreupdate this is also been reset to 22 or 222.

4

That is correct, it is coded in the remote.cgi code

[https://iapetus.saturn.pimb.org:444/cgi-bin/remote.cgi](https://iapetus.saturn.pimb.org:444/cgi-bin/remote.cgi)

You could modify the IPFire code and submit a patch to have an include file added into the sshd_config file but you would need to ensure that the include statement was at the top of the sshd_config file. The man page for sshd_config indicates that the first value of a parameter found will be taken, so if you had the port statement set at 222 and then a later include statement that had a port value of 3344, then the first value of 222 would be kept. So any include value would need to be at the top of the sshd_config file.

This link to the documentation provides information on how to submit patches for changes to the code.
https://www.ipfire.org/docs/devel/submit-patches

1 Like