Lower LoginGraceTime to 30s, should be plenty long for users, and mitigates the password login attempt bypass bug in OpenSSH. Ticket #4875

1 files changed, 1 insertions, 0 deletions

diff --git a/etc/sshd b/etc/sshd
index 3a51b36..9f68e2a 100755
--- a/etc/sshd
+++ b/etc/sshd
@@ -126,6 +126,7 @@
 	$sshconf .= "Port $sshport\n";
 	/* Hide FreeBSD version */
 	$sshconf .= "VersionAddendum none\n";
+	$sshconf .= "LoginGraceTime 30s\n";
 
 	/* Apply package SSHDCond settings if config file exists */
 	if (file_exists("/etc/sshd_extra")) {