moritz
/
dotfiles
1
0
Fork 0
Code Issues Pull Requests Projects Releases Wiki Activity

fix: openssh CVE-2024-6387

nixos
Moritz Böhme 2024-07-01 21:39:05 +02:00
parent 72def5c785
commit 189036f2c8
Signed by: moritz
GPG Key ID: 970C6E89EB0547A9
2 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
flake.lock
View File

@ -720,11 +720,11 @@
}, },
"master": { "master": {
"locked": { "locked": {
"lastModified": 1719764577, "lastModified": 1719834384,
"narHash": "sha256-304HNA/XvmyfD7JZfpqF4dEBnbUYci/gMZvDThXmYkE=", "narHash": "sha256-M6Vr7LbYeesXrG3hjAExzIfYFxrncrs1dpnp7zdeUN4=",
"owner": "nixos", "owner": "nixos",
"repo": "nixpkgs", "repo": "nixpkgs",
"rev": "19581e2ce8bc43f898ef724f8072ebf62bebb325", "rev": "c08bd9add4732d87fde747e15b8fc053dfd1234b",
"type": "github" "type": "github"
}, },
"original": { "original": {

2
modules/security/default.nix
View File

@ -1,5 +1,6 @@
{ config { config
, lib , lib
, pkgs
, ... , ...
}: { }: {
## System security tweaks ## System security tweaks
@ -69,6 +70,7 @@
# SSH # SSH
services.openssh = { services.openssh = {
package = pkgs.master.openssh; # HACK: to fix CVE-2024-6387
settings = { settings = {
# Disable ssh password login # Disable ssh password login
PasswordAuthentication = lib.mkDefault false; PasswordAuthentication = lib.mkDefault false;