nixos/sshd: add StrictModes option

2019-09-08 00:25:04 +00:00
parent 3a7cda19dd
commit eeabae56e7
1 changed files with 7 additions and 0 deletions
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@@ -375,6 +375,13 @@ in
                <https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67>
              '';
            };
+            StrictModes = mkOption {
+              type = types.bool;
+              default = true;
+              description = lib.mdDoc ''
+                Whether sshd should check file modes and ownership of directories
+              '';
+            };
            Ciphers = mkOption {
              type = types.listOf types.str;
              default = [