sshd: Enable seccomp sandboxing

2015-03-09 11:27:19 +01:00
parent 9867f4bdef
commit d31202fba2
1 changed files with 2 additions and 0 deletions
@@ -381,6 +381,8 @@ in

        UsePAM yes

+        UsePrivilegeSeparation sandbox
+
        AddressFamily ${if config.networking.enableIPv6 then "any" else "inet"}
        ${concatMapStrings (port: ''
          Port ${toString port}