So I want to harden my SSH daemon when Remote Login is enabled.
So far I've found:
/System/Library/LaunchDaemons/ssh.plist-> protected by SIP
Why are there 3 locations, and what is the difference?
Ask Different is a question and answer site for power users of Apple hardware and software. It only takes a minute to sign up.Sign up to join this community
If you look at the specific files you'll see that there are actually only two files (
/private/etc/ssh/sshd_config is the same file unless your setup is non-standard).
/System/Library/LaunchDaemons/ssh.plistis used by the system to start
sshd, usually you don't need to change this
/private/etc/ssh/sshd_configis the global configuration file for
sshd, and the place where you need to change whatever is required to harden SSH on your Mac.