From eeabae56e7ebbdaf3c02da16d8d81fe885261c6d Mon Sep 17 00:00:00 2001
From: Alyssa Ross <hi@alyssa.is>
Date: Sun, 8 Sep 2019 00:25:04 +0000
Subject: nixos/sshd: add StrictModes option

---
 nixos/modules/services/networking/ssh/sshd.nix | 7 +++++++
 1 file changed, 7 insertions(+)

(limited to 'nixos/modules')

diff --git a/nixos/modules/services/networking/ssh/sshd.nix b/nixos/modules/services/networking/ssh/sshd.nix
index 70dde79a198d..59980a4cef9c 100644
--- a/nixos/modules/services/networking/ssh/sshd.nix
+++ b/nixos/modules/services/networking/ssh/sshd.nix
@@ -375,6 +375,13 @@ in
                 <https://infosec.mozilla.org/guidelines/openssh#modern-openssh-67>
               '';
             };
+            StrictModes = mkOption {
+              type = types.bool;
+              default = true;
+              description = lib.mdDoc ''
+                Whether sshd should check file modes and ownership of directories
+              '';
+            };
             Ciphers = mkOption {
               type = types.listOf types.str;
               default = [
-- 
cgit 1.4.1