add lockfiles and delete them from tree
Merge pull request #9 from ehaselwanter/master

add lockfiles and delete them from tree
relax permissions on /etc/ssh and files

root can write anyway, even if the permissions strictly speaking doesn't allow this. moreover, we want root to write, in the default DAC based model, so open this up slightly

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
Merge pull request #11 from TelekomLabs/relax-permissions

relax permissions on /etc/ssh and files
enforce a space between ListenAddress and the value

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: added conditional cipher checks

implemented for ubuntu right now

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
improvement: don't check for commented options

1. the user configuration and options should be handled in the recipe/module. leaving these options in is nice, but not very maintainable since it may prevent us from using upstream modules/cookbooks for ssh management, which may not all have the option to add comments. since it's unnecessary, remove it
2. none of these commented options requires being set by compliance guidelines and sanity, so imho they are all fine to be removed

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: added conditional MAC checks

implemented for ubuntu right now

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: added conditional KEX checks

implemented for ubuntu right now

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
remove gcm cipher and fix ordering of ciphers

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
remove some leftover commented options

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: add tests for RedHat-based ciphers (6.4+6.5)

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: add tests for RedHat-based macs (6.4+6.5)

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
feature: make sure KEX for RedHat 6.4+6.5 is disabled

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
fix syntax errors

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
sort ciphers correctly

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>
fix typo in mac test

Signed-off-by: Dominik Richter <dominik.richter@gmail.com>