Workaround for SSH CVE-2024-6387 (After applying, restart the SSH Daemon or reboot. https://www.freebsd.org/security/advisories/FreeBSD-SA-24:04.openssh.asc)
diff --git a/src/etc/sshd b/src/etc/sshd
index 4b4ee3f72a..efc2680eac 100755
--- a/src/etc/sshd
+++ b/src/etc/sshd
@@ -106,7 +106,7 @@ if (config_get_path('system/ssh/sshdkeyonly') == "both") {
$sshconf .= "PubkeyAuthentication yes\n";
}
$sshconf .= "UseDNS no\n";
-$sshconf .= "LoginGraceTime 30s\n";
+$sshconf .= "LoginGraceTime 0s\n";
/* Hide FreeBSD version */
$sshconf .= "VersionAddendum none\n";
if (config_path_enabled('system/ssh', 'sshdagentforwarding')) {
Don't know if compatible with other version than 24.03, use at your on risk...