Merge pull request #236303 from alyssais/StrictModes

nixos/sshd: add StrictModes option
2023-06-07 15:53:20 +02:00
parent 710aa8e088 eeabae56e7
commit fdcc0ecf37
1 changed files with 7 additions and 0 deletions
@@ -375,6 +375,13 @@ in
                <https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67>
              '';
            };
+            StrictModes = mkOption {
+              type = types.bool;
+              default = true;
+              description = lib.mdDoc ''
+                Whether sshd should check file modes and ownership of directories
+              '';
+            };
            Ciphers = mkOption {
              type = types.listOf types.str;
              default = [