diff options
| -rw-r--r-- | src/ssh.conf | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/src/ssh.conf b/src/ssh.conf index cb8d0cd..b49b129 100644 --- a/src/ssh.conf +++ b/src/ssh.conf @@ -4,6 +4,10 @@ PermitRootLogin no # git user has access to all repos. no login allowed DenyUsers git +# explicit allowlist: only users in the gitsudo group may authenticate +# (git and root are NOT in gitsudo) +AllowGroups gitsudo + # no login shell PermitTTY no |