[
https://issues.apache.org/jira/browse/KARAF-4809?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15663356#comment-15663356
]
Andrea Cosentino commented on KARAF-4809:
-----------------------------------------
I guess we need emphasizing this security setting in the documentation, but I
think the default can stay as it is now.
-1 to this change.
Docs need to be reviewed in relation to this.
> SSH should not listen to all hosts
> ----------------------------------
>
> Key: KARAF-4809
> URL: https://issues.apache.org/jira/browse/KARAF-4809
> Project: Karaf
> Issue Type: Bug
> Affects Versions: 4.0.7
> Reporter: Lars Kiesow
> Assignee: Jean-Baptiste Onofré
>
> The default SSH server configuration will make Karaf listen to all hosts. It
> is usually good practice to instead listen to localhost only by default to
> avoid possible security risks (e.g. accidentally exposing an unconfigured SSH
> server).
> This can be fixed by adjusting `sshHost` in `org.apache.karaf.shell.cfg`
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
