sshd: Enable seccomp sandboxing

This commit is contained in:
Eelco Dolstra 2015-03-09 11:26:18 +01:00
parent 9867f4bdef
commit d31202fba2

View File

@ -381,6 +381,8 @@ in
UsePAM yes UsePAM yes
UsePrivilegeSeparation sandbox
AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"} AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}
${concatMapStrings (port: '' ${concatMapStrings (port: ''
Port ${toString port} Port ${toString port}