Hey,
I want to make some changes to the SSH server settings.
specifically, I want to disable password for better security (this can be toggled in the CE settings app), but in addition to that, I want to enable it for 192.168.1.0/24, in case I ever lose access from the configured devices.
this can be done by adding:
Match address 192.168.1.0/24
PasswordAuthentication yes
in /etc/ssh/sshd_config, but that file is not editable, because
Error writing /etc/ssh/sshd_config: Read-only file system
is there an alternative that can make this happen?
The clean way would be to copy sshd service file /usr/lib/systemd/system/sshd.service to /storage/.config/system.d/. Also copy /etc/ssh/sshd_config to /storage and change it to your needs. In sshd service file add parameter **-f ** with path to your sshd_config file on /storage.
Maybe you could use SSH_ARGS in file /storage/.cache/services/sshd.conf and specify config file with -f.
1 Like
this post together with your others in https://forum.libreelec.tv/thread/17597-ssh-logs/ will surely provide a way to do what I want, I just don’t have enough time to test it right now 
thanks!
I will try to update later on.