movefasta/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2025-06-10 03:23:29 +03:00
Code Issues Projects Releases Packages Wiki Activity

openssh: disable memlocking when building with PAM support

Browse source 
With the current OpenSSH version it can result in some crashes
preventing users to log in.

Upstream issue: https://bugzilla.mindrot.org/show_bug.cgi?id=3822

For reference Debian also disabled it for now:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103418
This commit is contained in:
Thomas Gerbet 2025-05-28 08:15:27 +02:00
parent aeb017b583
commit 39c7929c6e
1 changed files with 3 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

4
pkgs/tools/networking/openssh/common.nix
View file

@ -37,7 +37,9 @@
withFIDO ? stdenv.hostPlatform.isUnix && !stdenv.hostPlatform.isMusl && withSecurityKey, withFIDO ? stdenv.hostPlatform.isUnix && !stdenv.hostPlatform.isMusl && withSecurityKey,
withPAM ? stdenv.hostPlatform.isLinux, withPAM ? stdenv.hostPlatform.isLinux,
# Attempts to mlock the entire sshd process on startup to prevent swapping. # Attempts to mlock the entire sshd process on startup to prevent swapping.
withLinuxMemlock ? stdenv.hostPlatform.isLinux, # Currently disabled when PAM support is enabled due to crashes
# See https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1103418
withLinuxMemlock ? (stdenv.hostPlatform.isLinux && !withPAM),
linkOpenssl ? true, linkOpenssl ? true,
isNixos ? stdenv.hostPlatform.isLinux, isNixos ? stdenv.hostPlatform.isLinux,
}: }: