[openssh] Allow only device owner. Contributes to JB#47597

This prevents users not in sailfish-system group from logging in with SSH.
sailfishos · Dec 10, 2019 · 9c1bf4d · 9c1bf4d
1 parent 34809df
commit 9c1bf4d
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/rpm/sshd_config b/rpm/sshd_config
@@ -108,6 +108,9 @@ UsePAM yes
 # override default of no subsystems
 Subsystem	sftp	/usr/libexec/openssh/sftp-server
 
+# allow only device owner(s)
+AllowGroups sailfish-system root
+
 # Example of overriding settings on a per-user basis
 #Match User anoncvs
 #	X11Forwarding no