Top 20 OpenSSH Server Best Security Practices | Linux Today

Top 20 OpenSSH Server Best Security Practices

Written By
Web Webster
Web Webster
Jul 26, 2009

[ Thanks to An Anonymous Reader for
this link. ]

“#4: Configure Idle Log Out Timeout Interval User can
login to server via ssh and you can set an idel timeout interval to
avoid unattended ssh session. Open sshd_config and make sure
following values are configured:

ClientAliveInterval 300
ClientAliveCountMax 0

You are setting an idle timeout interval in seconds (300 secs =
5 minutes). After this interval has passed, the idle user will be
automatically kicked out (read as logged out). See how to
automatically log BASH / TCSH / SSH users out after a period of
inactivity for more details.

“#5: Disable .rhosts Files

“Don’t read the user’s ~/.rhosts and ~/.shosts files. Update
sshd_config with the following settings:”


Complete Story

Web Webster

Web Webster

Web Webster has more than 20 years of writing and editorial experience in the tech sector. He’s written and edited news, demand generation, user-focused, and thought leadership content for business software solutions, consumer tech, and Linux Today, he edits and writes for a portfolio of tech industry news and analysis websites including webopedia.com, and DatabaseJournal.com.

Linux Today Logo

LinuxToday is a trusted, contributor-driven news resource supporting all types of Linux users. Our thriving international community engages with us through social media and frequent content contributions aimed at solving problems ranging from personal computing to enterprise-level IT operations. LinuxToday serves as a home for a community that struggles to find comparable information elsewhere on the web.

Property of TechnologyAdvice. © 2026 TechnologyAdvice. All Rights Reserved

Advertiser Disclosure: Some of the products that appear on this site are from companies from which TechnologyAdvice receives compensation. This compensation may impact how and where products appear on this site including, for example, the order in which they appear. TechnologyAdvice does not include all companies or all types of products available in the marketplace.