]> git.ipfire.org Git - thirdparty/openssh-portable.git/commitdiff
upstream: reduce logingrace penalty.
authordjm@openbsd.org <djm@openbsd.org>
Thu, 25 Jul 2024 23:44:01 +0000 (23:44 +0000)
committerDamien Miller <djm@mindrot.org>
Thu, 25 Jul 2024 23:49:08 +0000 (09:49 +1000)
A single forgotton login that times out should be below the penalty
threshold.

ok deraadt/claudio

OpenBSD-Commit-ID: cee1f7d17597c97bff8e5092af5d136fdb08f81d

servconf.c

index 5b32f0bfc8db6237f71d0805209eff3d8aaae6e0..5a20d6f80058d61a3ee88525b5912636e5f8079e 100644 (file)
@@ -1,4 +1,4 @@
-/* $OpenBSD: servconf.c,v 1.411 2024/06/12 22:36:00 djm Exp $ */
+/* $OpenBSD: servconf.c,v 1.412 2024/07/25 23:44:01 djm Exp $ */
 /*
  * Copyright (c) 1995 Tatu Ylonen <ylo@cs.hut.fi>, Espoo, Finland
  *                    All rights reserved
@@ -434,7 +434,7 @@ fill_default_server_options(ServerOptions *options)
        if (options->per_source_penalty.penalty_crash == -1)
                options->per_source_penalty.penalty_crash = 90;
        if (options->per_source_penalty.penalty_grace == -1)
-               options->per_source_penalty.penalty_grace = 20;
+               options->per_source_penalty.penalty_grace = 10;
        if (options->per_source_penalty.penalty_authfail == -1)
                options->per_source_penalty.penalty_authfail = 5;
        if (options->per_source_penalty.penalty_noauth == -1)