diff options
author | Chris Buechler <cmb@pfsense.org> | 2015-07-23 23:07:47 -0500 |
---|---|---|
committer | Chris Buechler <cmb@pfsense.org> | 2015-07-23 23:09:35 -0500 |
commit | f674922ee93a3bef6158754bc08d4a6b5ace0daa (patch) | |
tree | d93408efcc76b9cf04d9dfb1e51a6bc552bbef64 | |
parent | 021a97b58a3ab24a66773ccc61670365015c85e5 (diff) | |
download | pfsense-f674922ee93a3bef6158754bc08d4a6b5ace0daa.zip pfsense-f674922ee93a3bef6158754bc08d4a6b5ace0daa.tar.gz |
Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates the password login attempt bypass bug in OpenSSH. Ticket #4875
-rwxr-xr-x | etc/sshd | 1 |
1 files changed, 1 insertions, 0 deletions
@@ -126,6 +126,7 @@ $sshconf .= "Port $sshport\n"; /* Hide FreeBSD version */ $sshconf .= "VersionAddendum none\n"; + $sshconf .= "LoginGraceTime 30s\n"; /* Apply package SSHDCond settings if config file exists */ if (file_exists("/etc/sshd_extra")) { |