in el9 the system security policies are added at the end of the sshd …

…config and if we do not add a "Match all" it will be interpretted under the level of the match (#192) Signed-off-by: Mike van Goor <[email protected]>
sous-chefs · Nov 27, 2024 · d5a632e · d5a632e
1 parent 09010ee
commit d5a632e
Show file tree

Hide file tree

Showing 2 changed files with 3 additions and 0 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -4,6 +4,8 @@ This file is used to list changes made in each version of the openssh cookbook.
 
 ## Unreleased
 
+- In more recent enterprise linux (rhel, oel, etc) systems system policies are added at end of sshd config and therefor any match block needs to be closed
+
 ## 2.11.14 - *2024-11-18*
 
 Standardise files with files in sous-chefs/repo-management

diff --git a/templates/sshd_config.erb b/templates/sshd_config.erb
@@ -38,4 +38,5 @@ Match <%= match_key.sub(/^[0-9]+/, '').strip %>
 <%        end -%>
 <%      end -%>
 <%    end -%>
+Match all
 <%  end -%>