#! /usr/bin/patch -p0
# $Header: /global/src/etc/cl-manage-scripts/patches/RCS/P-sshd_config-allow-hostbased,v 1.5 2025/03/21 15:19:26 mas90 Exp $
# This patch to ensure that ssh logins can (safely) be host based (as only uses known hosts in /etc/ssh/) is believe no longer to be needed, so has been undone - RT#94078
############ matches = ^IgnoreUserKnownHosts.yes$
# patch-file matches = ^#HostbasedAuthentication.no
# patch-file distmatches = Fedora|CentOS|Red.Hat.Enterprise.Linux
# Process using /usr/bin/cl-patch-file unless matching the above
--- /etc/ssh/sshd_config	2004-09-21 05:56:59.000000000 +0100
+++ /etc/ssh/sshd_config	2004-12-14 14:35:02.190587968 +0000
@@ -50 +50 @@
+#HostbasedAuthentication no
-HostbasedAuthentication yes
@@ -53 +53 @@
+#IgnoreUserKnownHosts no
-IgnoreUserKnownHosts yes
@@ -55 +55 @@
+#IgnoreRhosts yes
-IgnoreRhosts no
