sshd: Enable seccomp sandboxing
This commit is contained in:
parent
9867f4bdef
commit
d31202fba2
@ -381,6 +381,8 @@ in
|
|||||||
|
|
||||||
UsePAM yes
|
UsePAM yes
|
||||||
|
|
||||||
|
UsePrivilegeSeparation sandbox
|
||||||
|
|
||||||
AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}
|
AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}
|
||||||
${concatMapStrings (port: ''
|
${concatMapStrings (port: ''
|
||||||
Port ${toString port}
|
Port ${toString port}
|
||||||
|
Loading…
x
Reference in New Issue
Block a user