fix: CVE CVE-2024-6387 workaround

This commit is contained in:
Inex Code 2024-07-01 19:14:28 +04:00
parent 1b62d8af45
commit 7dd4860735

View file

@ -74,8 +74,10 @@ in
settings = { settings = {
PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication; PasswordAuthentication = config.selfprivacy.ssh.passwordAuthentication;
PermitRootLogin = "yes"; PermitRootLogin = "yes";
LoginGraceTime = 0;
}; };
openFirewall = false; openFirewall = false;
}; };
programs.ssh = { programs.ssh = {
pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ]; pubkeyAcceptedKeyTypes = [ "ssh-ed25519" "ssh-rsa" "ecdsa-sha2-nistp256" ];