[5.10] SSH hardening and secure remote access defaults #10
Description
Implement hardened OpenSSH server defaults, sshd_config baseline (ciphers, MACs, KEX), authentication policy (key-only, per-user allow/deny), secure remote access UX via Cortex prompts, brute-force protections, safe change workflow, and logging/auditing.
Scope
This epic covers 12 decisions and 9 tasks from the Cortex Linux planning system.
Source
- Planning Tool: Skilliks
- Module: See internal planning documentation
Tasks
Tasks will be added as sub-issues or checklist items as specification is refined.
Epic generated from Cortex Linux strategic planning