From e1d2e9149da901d02584cd1357a8ec8ebbfb7dfc Mon Sep 17 00:00:00 2001
From: Michal Konecny <mkonecny@redhat.com>
Date: Nov 22 2023 15:48:16 +0000
Subject: Add VerifyHostKeyDNS parameter to SSH configuration


Signed-off-by: Michal Konecny <mkonecny@redhat.com>

---

diff --git a/modules/sysadmin_guide/pages/sshaccess.adoc b/modules/sysadmin_guide/pages/sshaccess.adoc
index debfeb3..9a5a7a1 100644
--- a/modules/sysadmin_guide/pages/sshaccess.adoc
+++ b/modules/sysadmin_guide/pages/sshaccess.adoc
@@ -65,6 +65,7 @@ Host bastion.fedoraproject.org
   User FAS_USERNAME (all lowercase)
   ProxyCommand none
   ForwardAgent no
+  VerifyHostKeyDNS yes
 Host *.iad2.fedoraproject.org *.qa.fedoraproject.org 10.3.160.* 10.3.161.* 10.3.163.* 10.3.165.* 10.3.167.* 10.3.171.* *.vpn.fedoraproject.org
   ProxyCommand ssh -W %h:%p bastion.fedoraproject.org
 Host batcave01