@robertgendler commented on GitHub:
Closing since this appears to be changed in 13.3.1 by Apple.
@georgalis commented on GitHub:
...
Here's one example of such a rule, but 7 are failing for (I believe) the same reason.
@bernstei if you forward me the 7, I will include them in my patch...
@robertgendler commented on GitHub:
Unfortunately if remote login is never enabled, then the sshd -T will fail with this error. It has to generate the hotkeys once.
The sshd -T is our best…
@georgalis commented on GitHub:
@robertgendler if you can wait half dozen hours, I'll try my hand in this repo, and craft a PR this evening...
@georgalis commented on GitHub:
Pardon me for jumping in without fully understanding the context of this issue. @bernstei are you asking or telling? It would seem to me /usr/sbin/sshd -T is…
@paolafrancesca commented on GitHub:
@pfxpn listener param is ADDRESS:PORT, where address can be empty to listen on every interface
so it should be --tls-listener=:443
@robertgendler commented on GitHub:
@georgalis not bad of an idea to add some kind of check like that.
@mckaygerhard commented on GitHub:
i guess there's more typo and maybe command line depends on versioned
@bernstei commented on GitHub:
I'll note the 7 next time I'm in the office. Note that these are not necessarily that those are all of the ones that could fail this way - I only know about the 7…
@bernstei commented on GitHub:
I see this issue for these 7 items
os_sshd_client_alive_count_max_configure
os_sshd_client_alive_interval_configure
os_sshd_fips_140_ciphers
os_ssh_fips_140…
@georgalis commented on GitHub:
@georgalis the check to do is not fail potentially if the hostkey isn't found. Because checking for sshd running then only checks if sshd is running.
@robertge…
@georgalis commented on GitHub:
@bernstei thanks, patch #248 should cover os_sshd_* rules, @robertgendler I'll craft a separate PR for the os_ssh_* rules, this evening.
@georgalis commented on GitHub:
@bernstei that is not consistent with my experience with sshd and/or mac. I could speculate causes, but that would be something of a random walk. I'm certain some…