diff --git a/modules/features/security/systemd/security-systemd-sshd.nix b/modules/features/security/systemd/security-systemd-sshd.nix index 09442c3..66e1439 100644 --- a/modules/features/security/systemd/security-systemd-sshd.nix +++ b/modules/features/security/systemd/security-systemd-sshd.nix @@ -6,7 +6,7 @@ { ... }: { systemd.services.sshd.serviceConfig = { - NoNewPrivileges = true; + # NoNewPrivileges = true; ProtectSystem = "strict"; ProtectHome = "read-only"; ProtectClock = true; @@ -21,7 +21,7 @@ PrivateDevices = true; RestrictNamespaces = true; RestrictRealtime = true; - RestrictSUIDSGID = true; + # RestrictSUIDSGID = true; MemoryDenyWriteExecute = true; LockPersonality = true; DevicePolicy = "closed";