From c837a52a2409cf5a929a435eb52371aa1b0db6f1 Mon Sep 17 00:00:00 2001
From: Sandwich <sandwich@archworks.co>
Date: Sat, 21 Feb 2026 00:38:52 +0100
Subject: [PATCH] refactor(cis): remove redundant
 AllowUsers/AllowGroups/DenyUsers/DenyGroups from sshd

---
 roles/cis/tasks/sshd.yml | 4 ----
 1 file changed, 4 deletions(-)

diff --git a/roles/cis/tasks/sshd.yml b/roles/cis/tasks/sshd.yml
index e608b62..78933c4 100644
--- a/roles/cis/tasks/sshd.yml
+++ b/roles/cis/tasks/sshd.yml
@@ -62,7 +62,3 @@
       ###########################
       AllowStreamLocalForwarding no
       PermitUserRC no
-      AllowUsers *
-      AllowGroups *
-      DenyUsers nobody
-      DenyGroups nobody