Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.security.ssh > #241
| From | Bit Twister <BitTwister@mouse-potato.com> |
|---|---|
| Newsgroups | comp.security.ssh |
| Subject | Re: SSH intrusion in Fedora 16 |
| Date | 2011-12-21 12:22 +0000 |
| Organization | A noiseless patient Spider |
| Message-ID | <slrnjf3jss.t2s.BitTwister@wb.home.test> (permalink) |
| References | <m3wr9rs9rg.fsf@elektro.pacujo.net> <slrnjf1237.6i2.BitTwister@wb.home.test> <slrnjf3i8p.7j8.elvis-85496@notatla.org.uk> |
On 21 Dec 2011 11:58:43 GMT, all mail refused wrote: > PasswordAuthentication no in /etc/ssh/sshd_config That is a higher security level, but a bit restrictive. I can agree "root" could ssh into system as a user, then get root access. See Note: With PermitRootLogin without-password you can still ssh root@target to get in if root@target already has your public key. Note: Comes in handy if system is dinked up and users can not log in. Also if you need to scp/rsync files with root privs from one system to target.
Back to comp.security.ssh | Previous | Next — Previous in thread | Next in thread | Find similar
SSH intrusion in Fedora 16 Marko Rauhamaa <marko@pacujo.net> - 2011-12-20 14:33 +0200
Re: SSH intrusion in Fedora 16 Bit Twister <BitTwister@mouse-potato.com> - 2011-12-20 13:06 +0000
Re: SSH intrusion in Fedora 16 all mail refused <elvis-85496@notatla.org.uk> - 2011-12-21 11:58 +0000
Re: SSH intrusion in Fedora 16 Bit Twister <BitTwister@mouse-potato.com> - 2011-12-21 12:22 +0000
Re: SSH intrusion in Fedora 16 Marko Rauhamaa <marko@pacujo.net> - 2011-12-21 14:39 +0200
csiph-web