Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.user > #207181

Re: OpenSSH not closing idle sessions.

Show all headers | View raw

Greg Wooledge wrote:
> Most people want the exact opposite of that.

I don't really know the OP's rationale, but terminating an idle ssh
session is a step in the requirements/guidelines (STIG [1]) for
hardening systems for the US Department of Defense.

> Basically, what you're asking for is directly hostile to any kind of
> sane operation of a computer.

I'm not going to defend this requirement, merely showing one example
where one would want (or would have to) configure the ssh server this
way.

> > ClientAliveInterval 5

This is the setting that the STIG ID RHEL-07-040320 in [2] suggests to
edit.

Thomas

[1] https://iase.disa.mil/stigs
[2] https://rhel7stig.readthedocs.io/en/latest/medium.html#v-72237-all-network-connections-associated-with-ssh-traffic-must-terminate-at-the-end-of-the-session-or-after-10-minutes-of-inactivity-except-to-fulfill-documented-and-validated-mission-requirements-rhel-07-040320

Back to linux.debian.user | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

OpenSSH not closing idle sessions. timothylegg <timothydlegg@gmail.com> - 2019-04-08 19:30 +0200
  Re: OpenSSH not closing idle sessions. Greg Wooledge <wooledg@eeg.ccf.org> - 2019-04-08 19:40 +0200
    Re: OpenSSH not closing idle sessions. timothylegg <timothydlegg@gmail.com> - 2019-04-09 02:20 +0200
      Re: OpenSSH not closing idle sessions. Kushal Kumaran <kushal@locationd.net> - 2019-04-09 05:10 +0200
      Re: OpenSSH not closing idle sessions. Richard Hector <richard@walnut.gen.nz> - 2019-04-09 05:30 +0200
        Re: OpenSSH not closing idle sessions. Dan Ritter <dsr@randomstring.org> - 2019-04-09 11:50 +0200
    Re: OpenSSH not closing idle sessions. David Wright <deblis@lionunicorn.co.uk> - 2019-04-09 16:40 +0200
    Re: OpenSSH not closing idle sessions. Thomas Pircher <thp+debian@p5r.uk> - 2019-04-09 17:10 +0200
      Re: OpenSSH not closing idle sessions. Greg Wooledge <wooledg@eeg.ccf.org> - 2019-04-09 17:10 +0200
        Re: OpenSSH not closing idle sessions. Thomas Pircher <thp+debian@p5r.uk> - 2019-04-09 18:10 +0200
  Re: OpenSSH not closing idle sessions. mick crane <mick.crane@gmail.com> - 2019-04-09 17:40 +0200

csiph-web