about summary refs log tree commit diff
path: root/nixos/modules/services/networking/ssh
diff options
context:
space:
mode:
authorAlyssa Ross <hi@alyssa.is>2019-09-08 00:25:04 +0000
committerAlyssa Ross <hi@alyssa.is>2023-06-06 16:06:09 +0000
commiteeabae56e7ebbdaf3c02da16d8d81fe885261c6d (patch)
tree94f0c767cc351166ae96bb3987a2de27247d20d9 /nixos/modules/services/networking/ssh
parent3a7cda19dd6effdcd1fb9fcaf4b8faea1322ad84 (diff)
downloadnixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar.gz
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar.bz2
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar.lz
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar.xz
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.tar.zst
nixlib-eeabae56e7ebbdaf3c02da16d8d81fe885261c6d.zip
nixos/sshd: add StrictModes option
Diffstat (limited to 'nixos/modules/services/networking/ssh')
-rw-r--r--nixos/modules/services/networking/ssh/sshd.nix7
1 files changed, 7 insertions, 0 deletions
diff --git a/nixos/modules/services/networking/ssh/sshd.nix b/nixos/modules/services/networking/ssh/sshd.nix
index 70dde79a198d..59980a4cef9c 100644
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@@ -375,6 +375,13 @@ in
                 <https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67>
               '';
             };
+            StrictModes = mkOption {
+              type = types.bool;
+              default = true;
+              description = lib.mdDoc ''
+                Whether sshd should check file modes and ownership of directories
+              '';
+            };
             Ciphers = mkOption {
               type = types.listOf types.str;
               default = [