From 18e18c634bf5ae41f6526eb2889bc9de35599327 Mon Sep 17 00:00:00 2001 From: Matthias Jaros Date: Wed, 19 Aug 2026 16:26:22 +0200 Subject: Added explicit allow group for users that are meant to use git. This excludes automatically root and git user since there are not inside that group --- src/ssh.conf | 4 ++++ 1 file changed, 4 insertions(+) (limited to 'src/ssh.conf') diff --git a/src/ssh.conf b/src/ssh.conf index cb8d0cd..b49b129 100644 --- a/src/ssh.conf +++ b/src/ssh.conf @@ -4,6 +4,10 @@ PermitRootLogin no # git user has access to all repos. no login allowed DenyUsers git +# explicit allowlist: only users in the gitsudo group may authenticate +# (git and root are NOT in gitsudo) +AllowGroups gitsudo + # no login shell PermitTTY no -- cgit v1.3.1