aboutsummaryrefslogtreecommitdiff
path: root/release
diff options
context:
space:
mode:
authorColin Percival <cperciva@FreeBSD.org>2017-12-05 09:08:48 +0000
committerColin Percival <cperciva@FreeBSD.org>2017-12-05 09:08:48 +0000
commit4ba35bc4dbbc2b69c7afc2b86c011d450ca81fc7 (patch)
tree3e8cbf3fea074dc1aed3317f47fcd403837abb92 /release
parentbe28698cf226998a1f3e91f5ca6075b6fd54de08 (diff)
Notes
Diffstat (limited to 'release')
-rw-r--r--release/tools/ec2.conf6
1 files changed, 6 insertions, 0 deletions
diff --git a/release/tools/ec2.conf b/release/tools/ec2.conf
index e688b6a3d9ff..e712395da481 100644
--- a/release/tools/ec2.conf
+++ b/release/tools/ec2.conf
@@ -81,6 +81,12 @@ vm_extra_pre_umount() {
# Load the kernel module for the Amazon "Elastic Network Adapter"
echo 'if_ena_load="YES"' >> ${DESTDIR}/boot/loader.conf
+ # Disable ChallengeResponseAuthentication according to EC2
+ # requirements.
+ sed -i '' -e \
+ 's/^#ChallengeResponseAuthentication yes/ChallengeResponseAuthentication no/' \
+ ${DESTDIR}/etc/ssh/sshd_config
+
# The first time the AMI boots, the installed "first boot" scripts
# should be allowed to run:
# * ec2_configinit (download and process EC2 user-data)