aboutsummaryrefslogtreecommitdiff
path: root/templates/sshd_config/Gentoo_normal.erb
diff options
context:
space:
mode:
Diffstat (limited to 'templates/sshd_config/Gentoo_normal.erb')
-rw-r--r--templates/sshd_config/Gentoo_normal.erb7
1 files changed, 6 insertions, 1 deletions
diff --git a/templates/sshd_config/Gentoo_normal.erb b/templates/sshd_config/Gentoo_normal.erb
index 04712bd..c8dbda4 100644
--- a/templates/sshd_config/Gentoo_normal.erb
+++ b/templates/sshd_config/Gentoo_normal.erb
@@ -73,8 +73,13 @@ PubkeyAuthentication no
# Change to yes if you don't trust ~/.ssh/known_hosts for
# RhostsRSAAuthentication and HostbasedAuthentication
#IgnoreUserKnownHosts no
+
# Don't read the user's ~/.rhosts and ~/.shosts files
-#IgnoreRhosts yes
+<%- if real_sshd_pubkey_authentication.to_s == 'yes' then %>
+IgnoreRhosts yes
+<%- else %>
+IgnoreRhosts no
+<% end -%>
# To disable tunneled clear text passwords, change to no here!
<%- if real_sshd_password_authentication.to_s == 'yes' then %>