Paths/DevOps Engineer/Security & Hardening / Access Control & Least Privilege
Harden the SSH Daemon
Password logins and root logins are the two most abused doors into a Linux box. Write an sshd_config that closes both and trims the attack surface further.
Validator
⏱ 0:00
IDLE — checks run live as you type commands; submit when done
01Requirements
live checks- Directory ~/security exists○
- File ~/security/sshd_config exists○
- Root login is disabled○
- Password authentication is disabled○
- X11 forwarding is disabled○
02Walkthrough
1 of 7 revealed- 01
Create the security directory
Hardening configs are version controlled, so they live in a folder of their own.
mkdir ~/security - 6 locked · each failed submit reveals one
03Stuck?
0 of 3 revealedTake a hint without losing the lab — each one points at the thing to look at, not at the answer.
04AI Tutor
guides, never solvesTell me what you're stuck on — I'll nudge, not solve. Which requirement are you looking at?
04Notebook
saved locally in this browserlearner@lab — ubuntu:24.04
Session is disposable
↑/↓ recalls commands · Ctrl+Enter submits · type help for the command list