fix: CVE CVE-2024-6387 workaround
This commit is contained in:
@@ -74,8 +74,10 @@ in
|
|||||||
settings = {
|
settings = {
|
||||||
PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
|
PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
|
||||||
PermitRootLogin = "yes";
|
PermitRootLogin = "yes";
|
||||||
|
LoginGraceTime = 0;
|
||||||
};
|
};
|
||||||
openFirewall = false;
|
openFirewall = false;
|
||||||
|
|
||||||
};
|
};
|
||||||
programs.ssh = {
|
programs.ssh = {
|
||||||
pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];
|
pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];
|
||||||
|
Reference in New Issue
Block a user