From c6cec0234b5543d23e2b8afe9b2340395de8184c Mon Sep 17 00:00:00 2001
From: lassulus <lass@aidsballs.de>
Date: Sun, 17 Jan 2016 13:10:14 +0100
Subject: l 2 base: CVE-2016-0778 workaround

---
 lass/2configs/base.nix | 6 ++++++
 1 file changed, 6 insertions(+)

(limited to 'lass')

diff --git a/lass/2configs/base.nix b/lass/2configs/base.nix
index eca3becd..ab7cda7d 100644
--- a/lass/2configs/base.nix
+++ b/lass/2configs/base.nix
@@ -177,4 +177,10 @@ with lib;
     noipv4ll
   '';
 
+  #CVE-2016-0777 and CVE-2016-0778 workaround
+  #https://www.qualys.com/2016/01/14/cve-2016-0777-cve-2016-0778/openssh-cve-2016-0777-cve-2016-0778.txt
+  programs.ssh.extraConfig = ''
+    UseRoaming no
+  '';
+
 }
-- 
cgit v1.2.3