sshd: Enable seccomp sandboxing

2015-03-09 11:26:18 +01:00 · 2015-03-09 11:26:18 +01:00 · d31202fba2
commit d31202fba2
parent 9867f4bdef
1 changed files with 2 additions and 0 deletions
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@ -381,6 +381,8 @@ in

        UsePAM yes

+        UsePrivilegeSeparation sandbox
+
        AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}
        ${concatMapStrings (port: ''
          Port ${toString port}