From 90cab573ebfa2cd375be7a2f3b29084b244e886f Mon Sep 17 00:00:00 2001 From: Balakrishnan Balasubramanian Date: Sun, 27 Jul 2025 21:02:23 -0400 Subject: [PATCH] Disallow public access the ssh socket --- nnss-ssh@.service | 1 + 1 file changed, 1 insertion(+) diff --git a/nnss-ssh@.service b/nnss-ssh@.service index ff5ab69..5e7dbd9 100644 --- a/nnss-ssh@.service +++ b/nnss-ssh@.service @@ -18,6 +18,7 @@ RestartSteps=6 RestartMaxDelaySec=24h RuntimeDirectory=nnss-%i +RuntimeDirectoryMode=0750 StateDirectory=nnss-%i ExecStart=ssh -F /usr/lib/nnss/ssh_config default