From ee11e477a348bace693a9fe9f921e3134a17bd59 Mon Sep 17 00:00:00 2001 From: Colleen Murphy Date: Sat, 8 Apr 2017 22:02:40 +0200 Subject: [PATCH] Remove ssh_config NoRoaming setting The security vulnerability that required this mitigation has been patched[1][2] so we can clean up this code. [1] https://www.ubuntu.com/usn/usn-2869-1/ [2] https://access.redhat.com/security/cve/cve-2016-0777 Change-Id: I6c9f5a533ee9c49cd563eb31bd2a3c6f2d056ec3 --- modules/openstack_project/manifests/template.pp | 6 ------ 1 file changed, 6 deletions(-) diff --git a/modules/openstack_project/manifests/template.pp b/modules/openstack_project/manifests/template.pp index 9d5a140124..f15b93728e 100644 --- a/modules/openstack_project/manifests/template.pp +++ b/modules/openstack_project/manifests/template.pp @@ -183,12 +183,6 @@ class openstack_project::template ( user => 'root', } - file_line { 'ensure NoRoaming for ssh clients': - after => '^Host \*', - path => '/etc/ssh/ssh_config', - line => ' UseRoaming no', - } - if ($::osfamily == 'Debian') { # NOTE(pabelanger): Puppetlabs only support Ubuntu Trusty and below, # anything greater will use the OS version of puppet.