OP#561 add parameters

.gitignore

@@ -1,39 +1,5 @@
-.git/
-.*.sw[op]
-.metadata
 .yardoc
-.yardwarns
+Gemfile.lock
+FileList
 .scannerwork
-*.iml
-/.bundle/
-/.idea/
-/.vagrant/
-/coverage/
-/bin/
-/doc/
-/Gemfile.local
-/Gemfile.lock
-/junit/
-/log/
-/pkg/
-/spec/fixtures/manifests/
-/spec/fixtures/modules/*
-/tmp/
-/vendor/
-/.vendor/
-/convert_report.txt
-/update_report.txt
-.DS_Store
-.project
-.envrc
-/inventory.yaml
-/spec/fixtures/litmus_inventory.yaml
-.resource_types
-.modules
-.task_cache.json
-.plan_cache.json
-.rerun.json
-bolt-debug.log
 .vscode
-.puppet-lint.rc
-.rspec

.puppet-lint.rc

@@ -0,0 +1,3 @@
+--no-variable_scope-check
+--no-top_scope_facts
+--no-140chars-check

manifests/main/config.pp

@@ -5,5 +5,6 @@
 ##############################################################################
 class confdroid_ssh::main::config (
 ) inherits confdroid_ssh::params {
+  require confdroid_selinux
   include confdroid_ssh::main::service
 }

manifests/params.pp

@@ -12,6 +12,9 @@
 # @param [String] ssh_address_family AddressFamily setting for sshd_config
 # @param [String] ssh_listen_address ListenAddress setting for sshd_config
 # @param [String] ssh_root_login PermitRootLogin setting for sshd_config
+# @param [String] ssh_strict_modes StrictModes setting for sshd_config
+# @param [String] ssh_max_auth_tries MaxAuthTries setting for sshd_config
+# @param [String] ssh_max_sessions MaxSessions setting for sshd_config
 ##############################################################################
 class confdroid_ssh::params (
 
@@ -29,6 +32,9 @@ class confdroid_ssh::params (
   String  $ssh_address_family = 'any',
   String  $ssh_listen_address = '0.0.0.0',
   String  $ssh_root_login     = 'prohibit-password',
+  String  $ssh_strict_modes   = 'yes',
+  String  $ssh_max_auth_tries = '6',
+  String  $ssh_max_sessions    = '10',
 
 ) {
 # default facts

templates/sshd_custom_conf.erb

@@ -10,3 +10,6 @@ AddressFamily <%= @ssh_address_family %>
 ListenAddress <%= @ssh_listen_address %> 
 
 PermitRootLogin <%= @ssh_root_login %>
+StrictModes <%= @ssh_strict_modes %>
+MaxAuthTries <%= @ssh_max_auth_tries %>
+MaxSessions <%= @ssh_max_sessions %>