summaryrefslogtreecommitdiffstats
path: root/lass/2configs/base.nix
diff options
context:
space:
mode:
authorlassulus <lass@aidsballs.de>2016-01-17 13:10:14 +0100
committerlassulus <lass@aidsballs.de>2016-01-17 13:10:14 +0100
commitc6cec0234b5543d23e2b8afe9b2340395de8184c (patch)
treea03170014a8e5dc48ebd32d7dd3eff882a85a470 /lass/2configs/base.nix
parent4ce4b0053fde81608a8f2e3ecb2888a71203801b (diff)
l 2 base: CVE-2016-0778 workaround
Diffstat (limited to 'lass/2configs/base.nix')
-rw-r--r--lass/2configs/base.nix6
1 files changed, 6 insertions, 0 deletions
diff --git a/lass/2configs/base.nix b/lass/2configs/base.nix
index eca3becd6..ab7cda7d3 100644
--- a/lass/2configs/base.nix
+++ b/lass/2configs/base.nix
@@ -177,4 +177,10 @@ with lib;
noipv4ll
'';
+ #CVE-2016-0777 and CVE-2016-0778 workaround
+ #https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
+ programs.ssh.extraConfig = ''
+ UseRoaming no
+ '';
+
}