l 2 base: CVE-2016-0778 workaround

2016-01-17 13:10:14 +01:00 · 2016-01-17 13:10:14 +01:00 · c6cec0234b
commit c6cec0234b
parent 4ce4b0053f
1 changed files with 6 additions and 0 deletions
--- a/lass/2configs/base.nix
+++ b/lass/2configs/base.nix
@ -177,4 +177,10 @@ with lib;
    noipv4ll
  '';

+  #CVE-2016-0777 and CVE-2016-0778 workaround
+  #https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
+  programs.ssh.extraConfig = ''
+    UseRoaming no
+  '';
+
 }