diff --git a/linux/RemoveBadSSHKeys.sls b/linux/RemoveBadSSHKeys.sls
new file mode 100644
index 0000000..6c7b73c
--- /dev/null
+++ b/linux/RemoveBadSSHKeys.sls
@@ -0,0 +1,12 @@
+{% if grains['kernel'] == 'Linux' %}
+  {% set COMPTEUR=0 %}}
+  {% for BADKEY in pillar.get('BadSSHKeys',{}) %}
+suppression des mauvaises cles {{COMPTEUR}}:
+  file.line:
+    - name: /root/.ssh/authorized_keys
+    - mode: delete
+    - content: {{BADKEY}}
+    {% set COMPTEUR = COMPTEUR + 1 %}
+  {% endfor %}
+
+{% endif %}