summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGravatar Matthias Jaros <jarlucmat@mailbox.org>2026-08-19 16:26:22 +0200
committerGravatar Matthias Jaros <jarlucmat@mailbox.org>2026-08-19 22:02:21 +0200
commit18e18c634bf5ae41f6526eb2889bc9de35599327 (patch)
tree4538bf2ce4bce4122f457c944957e84d88068093
parenteec5f0d4adab3a6c2aeb80066d8fe0b0fdf0f2e7 (diff)
Added explicit allow group for users that are meant to use git. ThisHEADtrunk
excludes automatically root and git user since there are not inside that group
-rw-r--r--src/ssh.conf4
1 files changed, 4 insertions, 0 deletions
diff --git a/src/ssh.conf b/src/ssh.conf
index cb8d0cd..b49b129 100644
--- a/src/ssh.conf
+++ b/src/ssh.conf
@@ -4,6 +4,10 @@ PermitRootLogin no
# git user has access to all repos. no login allowed
DenyUsers git
+# explicit allowlist: only users in the gitsudo group may authenticate
+# (git and root are NOT in gitsudo)
+AllowGroups gitsudo
+
# no login shell
PermitTTY no