Uploaded image for project: 'Jenkins'
  1. Jenkins
  2. JENKINS-33595

Disable SSHD by default on new Installations

    XMLWordPrintable

Details

    Description

      JENKINS-30749 turned off the JNLP port by default, but not SSHD. It is still enabled (on a random port).

      We should

      • make SSHD be disabled by default
      • move its configuration to /configureSecurity

      Attachments

        Issue Links

          is blocking

          Improvement - An improvement or enhancement to an existing feature or task. JENKINS-30749 Jenkins should be secure out of the box by default

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved
          relates to

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. JENKINS-41745 Remoting-free CLI

          • Major - Major loss of function.
          • Resolved
          links to

          Web Link sshd-module PR 11

          Activity

            Ascending order - Click to sort in descending order
            View 5 older comments
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Jesse Glick
            Path:
            src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java
            http://jenkins-ci.org/commit/sshd-module/e9d1a5061a9d596ebedb0366d50276ad5c7c6023
            Log:
            [FIXED JENKINS-33595] Disable SSHD port by default.

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: src/main/java/org/jenkinsci/main/modules/sshd/SSHD.java http://jenkins-ci.org/commit/sshd-module/e9d1a5061a9d596ebedb0366d50276ad5c7c6023 Log: [FIXED JENKINS-33595] Disable SSHD port by default.
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Oleg Nenashev
            Path:
            CHANGELOG.md
            http://jenkins-ci.org/commit/sshd-module/0918d80d10075ea71b5c8071d02299f93cf77c30
            Log:
            Noting JENKINS-33595 towards sshd module 1.11

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Oleg Nenashev Path: CHANGELOG.md http://jenkins-ci.org/commit/sshd-module/0918d80d10075ea71b5c8071d02299f93cf77c30 Log: Noting JENKINS-33595 towards sshd module 1.11
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Jesse Glick
            Path:
            cli/pom.xml
            cli/src/main/java/hudson/cli/CLI.java
            cli/src/main/resources/hudson/cli/client/Messages.properties
            pom.xml
            test/pom.xml
            test/src/test/java/hudson/cli/CLITest.java
            test/src/test/resources/hudson/cli/id_rsa
            test/src/test/resources/hudson/cli/id_rsa.pub
            war/pom.xml
            http://jenkins-ci.org/commit/jenkins/60632c0e988c6e6620daefa181b24f45c46f8d6c
            Log:
            Added -strictHostKey option to CLI in -ssh mode.
            [FIXED JENKINS-33595] Picks up https://github.com/jenkinsci/sshd-module/pull/11
            to turn off SSHD by default, but expose it to tests which wish to enable it.

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Jesse Glick Path: cli/pom.xml cli/src/main/java/hudson/cli/CLI.java cli/src/main/resources/hudson/cli/client/Messages.properties pom.xml test/pom.xml test/src/test/java/hudson/cli/CLITest.java test/src/test/resources/hudson/cli/id_rsa test/src/test/resources/hudson/cli/id_rsa.pub war/pom.xml http://jenkins-ci.org/commit/jenkins/60632c0e988c6e6620daefa181b24f45c46f8d6c Log: Added -strictHostKey option to CLI in -ssh mode. [FIXED JENKINS-33595] Picks up https://github.com/jenkinsci/sshd-module/pull/11 to turn off SSHD by default, but expose it to tests which wish to enable it.
            scm_issue_link SCM/JIRA link daemon added a comment -

            Code changed in jenkins
            User: Daniel Beck
            Path:
            content/_data/changelogs/weekly.yml
            http://jenkins-ci.org/commit/jenkins.io/533c45c9ef9dae8b591219a2836c16efb25c535e
            Log:
            Note JENKINS-33595

            scm_issue_link SCM/JIRA link daemon added a comment - Code changed in jenkins User: Daniel Beck Path: content/_data/changelogs/weekly.yml http://jenkins-ci.org/commit/jenkins.io/533c45c9ef9dae8b591219a2836c16efb25c535e Log: Note JENKINS-33595
            danielbeck Daniel Beck added a comment -

            Glad to see a Jenkins development newbie got their teeth cut on this issue

            danielbeck Daniel Beck added a comment - Glad to see a Jenkins development newbie got their teeth cut on this issue

            People

              jglick Jesse Glick
              jglick Jesse Glick
              Votes:
              1 Vote for this issue
              Watchers:
              6 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: