On Mon, 17 Sep 2001, Vincent Danen wrote:

> On Sun Sep 16, 2001 at 07:07:07PM -0400, Yura Gusev wrote:
>
> SSH, not OpenSSH... OpenSSH as packaged (via updates) for Mandrake is
> secure.

Today yes. Tomorow?

> Preventing root logins via ssh is silly.  Any cracker worthy of the
> title could brute force your primary user's account and then start to
> play.  If you use an easy-to-guess root password, you shouldn't have
> access to root.

Let's not make it personal ok?

> Arbitrarily deciding that users should not allow root logins via ssh
> is not necessary.  A setting in msec could do this, or if you really
> don't want to permit root login via ssh, turn it off yourself.  While
> I agree it may be more secure, it's not *that* much more secure to
> start changing things now.

OK i agree msec is a solution.

-- 
 12:26am  up 24 days, 13:29,  3 users,  load average: 0.00, 0.05, 0.07
            __
         | /  \ |        Iouri Goussev            //  \\
        \_\\  //_/       [EMAIL PROTECTED]           _\\()//_
         .'/()\'.           Foo-Bar             / //  \\ \
   jgs    \\  //   http://foobar.irc-unix.net    | \__/ |
    I am not 31337. But I can use the Vi editor... ;-0


Reply via email to