talexander/nixpkgs
1
0
Fork 0
Code Issues Pull Requests Releases Activity

openssh: disable memlocking when building with PAM support

Browse Source 
With the current OpenSSH version it can result in some crashes
preventing users to log in.

Upstream issue: https://bugzilla.mindrot.org/show_bug.cgi?id=3822

For reference Debian also disabled it for now:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103418
This commit is contained in:
Thomas Gerbet 2025-05-28 08:15:27 +02:00
parent aeb017b583
commit 39c7929c6e
1 changed files with 3 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
pkgs/tools/networking/openssh/common.nix
View File

@ -37,7 +37,9 @@
withFIDO ? stdenv.hostPlatform.isUnix && !stdenv.hostPlatform.isMusl && withSecurityKey,
withPAM ? stdenv.hostPlatform.isLinux,
# Attempts to mlock the entire sshd process on startup to prevent swapping.
withLinuxMemlock ? stdenv.hostPlatform.isLinux,
# Currently disabled when PAM support is enabled due to crashes
# See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103418
withLinuxMemlock ? (stdenv.hostPlatform.isLinux && !withPAM),
linkOpenssl ? true,
isNixos ? stdenv.hostPlatform.isLinux,
}: