透過 ansible 修復 CVE-2016-0777、CVE-2016-0778，執行的時候記得輸入自己的 host

fix_CVE-2016-0777_0778.yml

#ansible 1.9.2
- name: fix_CVE-2016-0777_0778
  hosts: "{{ myhost }}"
  sudo: True
  sudo_user: root

  tasks:
    - name: upgrade openssh
      apt: name={{ item }} state=latest update_cache=yes
      with_items:
       - openssh-client
       - openssh-server
       - openssh-sftp-server

    - name: UseRoaming no
      lineinfile: dest=/etc/ssh/ssh_config insertafter=EOF line='UseRoaming no'

    - name: Restart openssh
      service: name=ssh state=restarted