Return-Path: X-Original-To: python-list@python.org Delivered-To: python-list@mail.python.org X-Spam-Status: OK 0.009 X-Spam-Evidence: '*H*': 0.98; '*S*': 0.00; 'root': 0.05; 'bootstrap': 0.07; 'deny': 0.07; 'subject:file': 0.07; 'root,': 0.09; 'subject:into': 0.09; 'cc:addr:python-list': 0.11; '*any*': 0.16; 'disallow': 0.16; 'finds': 0.16; 'from:addr:rosuav': 0.16; 'from:name:chris angelico': 0.16; 'record,': 0.16; 'ssh': 0.16; 'subject:download': 0.16; 'wrote:': 0.18; 'putting': 0.22; 'cc:addr:python.org': 0.22; 'cc:2**0': 0.24; "i've": 0.25; 'least': 0.26; 'header:In-Reply-To:1': 0.27; 'am,': 0.29; 'tim': 0.29; 'dec': 0.30; 'said,': 0.30; 'message-id:@mail.gmail.com': 0.30; 'chase': 0.31; 'keys': 0.31; 'there.': 0.32; 'quite': 0.32; 'subject:from': 0.34; 'problem': 0.35; 'but': 0.35; 'received:google.com': 0.35; 'there': 0.35; 'passwords': 0.36; 'done': 0.36; 'possible': 0.36; 'needed': 0.38; 'subject:can': 0.39; 'ground': 0.60; 'middle': 0.60; 'most': 0.60; 'account': 0.65; 'lose': 0.68; 'bot': 0.84; 'vulnerable': 0.84; 'boxes': 0.91; 'these.': 0.91; 'to:none': 0.92 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:cc :content-type; bh=pKI7Ln9qyOGMjmcRkKfwEJNQDdzMtwOx+Cjb1qAC9tI=; b=cglIr3NVH97EZUk1RIfHuY5E1xEgHrd5NXP0M5w5LjJwafyohPZBoN1Sai3WZqRrP1 Tb2G2ZpAx7AWXd+43LP8w3pDgrgNaubMwksza8Km4rWLcX7H0wJNaJpAKZ0xbnGfGgF/ +1QGQquCtciAk2kTbMQp/rqGJitCrs1/Sw2PzGGDRZcoPM0PDW8eRca8tEZBJNwjh989 8NVCcdBCS7UE8MUO11k3OKtGJnh6HobcShmINoOuDT9r9uNihV/5Auc60b2ogjGgE/qx a3PSEDyxI1QO4Fq2tvV/Uc2ibH/tQxS+R3rExcttn2kYln9nJKl30yw9MQbNCnSymZxd WPiw== MIME-Version: 1.0 X-Received: by 10.107.136.92 with SMTP id k89mr12676220iod.43.1418069782823; Mon, 08 Dec 2014 12:16:22 -0800 (PST) In-Reply-To: <20141208135042.7f2be108@bigbox.christie.dr> References: <5486AF57.7070803@gmail.com> <6mmhw.29670$5z5.10496@fx42.am4> <20141208135042.7f2be108@bigbox.christie.dr> Date: Tue, 9 Dec 2014 07:16:22 +1100 Subject: Re: why can't download file from linux server into local window disk c:? From: Chris Angelico Cc: "python-list@python.org" Content-Type: text/plain; charset=UTF-8 X-BeenThere: python-list@python.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: General discussion list for the Python programming language List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Newsgroups: comp.lang.python Message-ID: Lines: 17 NNTP-Posting-Host: 2001:888:2000:d::a6 X-Trace: 1418069791 news.xs4all.nl 2878 [2001:888:2000:d::a6]:44301 X-Complaints-To: abuse@xs4all.nl Path: csiph.com!usenet.pasdenom.info!bete-des-vosges.org!feed.ac-versailles.fr!nerim.net!novso.com!newsfeed.xs4all.nl!newsfeed4.news.xs4all.nl!xs4all!post.news.xs4all.nl!not-for-mail Xref: csiph.com comp.lang.python:82144 On Tue, Dec 9, 2014 at 6:50 AM, Tim Chase wrote: > Just for the record, you can enable root logins but disallow password > logins, so root has to be done with a public/private key-pair. > > That said, I do as you describe and still SSH to my ssh-user account, > then "su" to root as needed from there. But at least there's a > middle ground that isn't as vulnerable as putting a root account out > there to be banged on by any script-o-matic bot that finds it. I've done both of these. Most of my boxes don't have passwords on the root account AND don't allow SSH to root, relying on a sudo-enabled account usually; and it's perfectly possible to also deny password access to *any* account via SSH. Quite good for security... though it can create an awkward bootstrap problem if you lose all private keys that had access. ChrisA