qo.is/infrastructure
1
0
Fork 0
Code Issues 8 Pull requests Projects Releases Packages Activity Actions

Remove CVE-2024-6387 ssh workaround
Some checks failed
CI / build (push) Has been cancelled
Details

Browse source
This commit is contained in:
Fabian Hauser 2024-12-10 14:49:49 +02:00
parent 75ffd54e7d
commit bcf390e8a7
1 changed files with 0 additions and 4 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
defaults/base-minimal/default.nix
View file

@ -92,10 +92,6 @@
services.openssh = { services.openssh = {
enable = true; enable = true;
settings.PasswordAuthentication = false; settings.PasswordAuthentication = false;
# temporary mitigation agains CVE-2024-6387 «regreSSHion» RCE
# See https://github.com/NixOS/nixpkgs/pull/323753#issuecomment-2199762128
settings.LoginGraceTime = 0;
}; };
security.acme = { security.acme = {