opscode-cookbooks/openssh — pull request #12 by elliotkendallUCSF (2012-12-03 17:41:18+00:00)
Title: Make mode of sshd_config a configurable option (COOK-2000)

The default recipe currently hard-codes mode 0644 for sshd_config. That doesn't agree with the default mode on some platforms (RedHat, others?), and I'm being asked to comply with the CIS benchmark which calls for mode 0600.

This trivial patch adds a config_mode attribute which defaults to 0600 on RHEL/Fedora and 0644 elsewhere, but can be overridden as desired.

http://tickets.opscode.com/browse/COOK-2000