Signal9Signal9 — home
online
back to labs

SSH Server: Harden sshd_config

MediumNetworking10-20 min
The brief

Harden the SSH daemon by editing /etc/ssh/sshd_config, per /root/case/assignment.env:

1. Forbid root login — PermitRootLogin no

2. Disable password auth (keys only) — PasswordAuthentication no

3. Move the daemon to the required port — Port REQ_PORT

Remember: sshd uses the FIRST value it finds for a keyword. The required port varies per session. See /root/case/brief.txt.

What you'll do
  • Edit sshd_config directives correctly
  • Disable root SSH login
  • Enforce key-based authentication
  • Change the listening port

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.