From a83678e9ce6cdca51a561d8347ee6b0c26d0704c Mon Sep 17 00:00:00 2001
From: Ionut Pruteanu <ionut.pruteanu@siemens.com>
Date: Wed, 31 Jan 2024 20:27:07 +0200
Subject: [PATCH] Removing statement about SSH precedence vars.

Signed-off-by: Ionut Pruteanu <ionut.pruteanu@siemens.com>
---
 defaults/main.yml | 5 -----
 1 file changed, 5 deletions(-)

diff --git a/defaults/main.yml b/defaults/main.yml
index 6ae4b24..7a86433 100644
--- a/defaults/main.yml
+++ b/defaults/main.yml
@@ -1028,11 +1028,6 @@ rhel9cis_sshd:
     # This variable specifies the amount of seconds allowed for successful authentication to
     # the SSH server.
     logingracetime: 60
-    # WARNING: make sure you understand the precedence when working with these values!!
-    # allowusers:
-    # allowgroups: systems dba
-    # denyusers:
-    # denygroups:
     # This variable, if specified, configures a list of USER name patterns, separated by spaces, to allow SSH
     # access for users whose user name matches one of the patterns. This is done
     # by setting the value of `AllowUsers` option in `/etc/ssh/sshd_config` file.