Den 2012-02-14 05:14, Tyler Johnson skrev:
> Several people I work with are objecting to using shorewall-lite on  
> the
> grounds that it requires "PermitRootLogin yes" in the client's sshd 
> config.

uh :-)

> Is there a good way to work around this requirement? I assume sudo is
> the answer, but I don't see much discussion of this.

one can let it rsync or even vpn if thats fit better security

if shorewall lite could require pgp signed updates, inspiration from 
clamav 3dr party signatures, or keep it simple with ssh open to trusted 
ip only, i have seen more script kiddies to pop3 then ssh

------------------------------------------------------------------------------
Keep Your Developer Skills Current with LearnDevNow!
The most comprehensive online learning library for Microsoft developers
is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3,
Metro Style Apps, more. Free future releases when you subscribe now!
http://p.sf.net/sfu/learndevnow-d2d
_______________________________________________
Shorewall-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/shorewall-users

Reply via email to