fix(cis): remove deprecated sshd options and update hardening values

2026-02-20 20:17:52 +01:00
parent a2993212ca
commit 524356cf8d
6 changed files with 9 additions and 4 deletions
--- a/roles/cis/tasks/modules.yml
+++ b/roles/cis/tasks/modules.yml
@@ -10,6 +10,7 @@
      install hfs             /bin/false
      install hfsplus         /bin/false
      install cramfs          /bin/false
+      # Note: disabling squashfs breaks snap (Ubuntu). Remove for snap-dependent hosts.
      install squashfs        /bin/false
      install udf             /bin/false
      install usb-storage     /bin/false