diff --git a/roles/basessh/templates/sshd_config b/roles/basessh/templates/sshd_config index 60bb84ac91..ad01f909d4 100644 --- a/roles/basessh/templates/sshd_config +++ b/roles/basessh/templates/sshd_config @@ -31,7 +31,11 @@ AllowAgentForwarding no X11Forwarding no PermitTunnel no +{% if ansible_distribution_major_version == "6" %} +UsePrivilegeSeparation yes +{% else %} UsePrivilegeSeparation sandbox +{% endif %} # Accept locale-related environment AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES