From 29f5f85e4e342ccd24c43b58c7cee7cafa640de0 Mon Sep 17 00:00:00 2001
From: Chris Buechler <cmb@pfsense.org>
Date: Thu, 23 Jul 2015 23:07:47 -0500
Subject: Lower LoginGraceTime to 30s, should be plenty long for users, and
 mitigates the password login attempt bypass bug in OpenSSH. Ticket #4875

---
 etc/sshd | 1 +
 1 file changed, 1 insertion(+)

diff --git a/etc/sshd b/etc/sshd
index 007b73c..1f5f899 100755
--- a/etc/sshd
+++ b/etc/sshd
@@ -124,6 +124,7 @@
 	$sshconf .= "Port $sshport\n";
 	/* Hide FreeBSD version */
 	$sshconf .= "VersionAddendum none\n";
+	$sshconf .= "LoginGraceTime 30s\n";
 
 	/* Apply package SSHDCond settings if config file exists */
 	if (file_exists("/etc/sshd_extra")) {
-- 
cgit v1.1