fix: CVE CVE-2024-6387 workaround

2024-07-01 19:14:28 +04:00
parent 1b62d8af45
commit 7dd4860735
1 changed files with 2 additions and 0 deletions
--- a/configuration.nix
+++ b/configuration.nix
@@ -74,8 +74,10 @@ in
    settings = {
      PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
      PermitRootLogin = "yes";
+      LoginGraceTime = 0;
    };
    openFirewall = false;
+
  };
  programs.ssh = {
    pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];