Hardening “Gotchas”

The hardening-content shipped with watchmaker includes some content that may result in degredation of the hardened-systems’ user experience. We will try to document, here, those gotchas that we discover or that we are able to verify from user-submitted issue-reports.

• Use of sudo broken after application of “extra” hardenings (EL7)
• X11-Forwarding Via SSH is “Broken” (EL8)
• OpenSSH RSAv2 Keys Don’t Work (EL8)