Specifically, I have installed OpenSSH on both machines:
GNU/Linux Debian 9.3 with OpenSSH version
Linux Mint 18.3 with OpenSSH version
In this question, I read the following file is distributed with OpenSSH source code:
Presumably with the package(s). Am I right with assumption, that if I change the file in order to get the weak sizes out, and if I don't hold the
openssh-server and / or
openssh-client package(s), the file will be overwritten by the their next version update?
And if it will, can I put the single file on hold somehow?
I did the following:
Backed the file up:
mv /etc/ssh/moduli /etc/ssh/moduli.bak
Filtered out the sizes less than 4095 with:
awk '$5 >= 4095' /etc/ssh/moduli.bak > /etc/ssh/moduli