From 3d64f22c39ac8b7829106c4ca44afe71783e90b0 Mon Sep 17 00:00:00 2001
From: Jeltz <tom.barthe+aurore@ens-paris-saclay.fr>
Date: Sat, 24 Oct 2020 19:12:35 +0200
Subject: [PATCH] Modification du keepalive d'OpenSSHd.
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

Les serveurs OpenSSH détectent désormais la déconnexion du client et
peuvent terminer la session.
---
 roles/basesecurity/tasks/main.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/roles/basesecurity/tasks/main.yml b/roles/basesecurity/tasks/main.yml
index be168f4..2db6b5b 100644
--- a/roles/basesecurity/tasks/main.yml
+++ b/roles/basesecurity/tasks/main.yml
@@ -35,7 +35,7 @@
     - ["PermitRootLogin", "prohibit-password"]
     - ["AllowAgentForwarding", "no"]
     - ["X11Forwarding", "no"]
-    - ["TCPKeepAlive", "no"]
+    - ["TCPKeepAlive", "yes"]
   notify: Restart sshd service
 
 # See banned client with `fail2ban-client status sshd`