clan/clan-core
11
2
Fork 13
Code Issues 91 Pull Requests 6 Actions Packages Projects 1 Releases Wiki Activity

sshd: workaround for CVE-2024-6387 #1674

Merged
clan-bot merged 1 commits from openssh-cve-workaround into main 2024-07-01 12:04:54 +00:00
Conversation 0 Commits 1 Files Changed 1 +4
1 changed files with 4 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
clanModules/sshd/default.nix
View File

@ -2,6 +2,10 @@
{
services.openssh.enable = true;
services.openssh.settings.PasswordAuthentication = false;
# We might want to remove this once, openssh is fixed everywhere:
# Workaround for CVE-2024-6387
# https://github.com/NixOS/nixpkgs/pull/323753#issuecomment-2199762128
services.openssh.settings.LoginGraceTime = 0;
Mic92 marked this conversation as resolved Outdated
lassulus commented 2024-07-01 12:00:47 +00:00
Outdated
Review
Copy Link

redundant settings?

redundant settings?
Mic92 commented 2024-07-01 12:02:10 +00:00
Outdated
Review
Copy Link

Ci catched it as well.

Ci catched it as well.
services.openssh.hostKeys = [
{