Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.misc > #12290

Re: fedora 20 disabling ssh by default

Path csiph.com!v102.xanadu-bbs.net!xanadu-bbs.net!feeder.erje.net!eu.feeder.erje.net!news.albasani.net!.POSTED!not-for-mail
From Andreas Kohlbach <oct14.5.ankman@spamgourmet.com>
Newsgroups comp.os.linux.misc
Subject Re: fedora 20 disabling ssh by default
Date Sat, 11 Oct 2014 16:35:27 -0400
Organization albasani.net
Lines 42
Message-ID <877g06e44w.fsf@usenet.ankman.de> (permalink)
References <m175d3$mtg$1@speranza.aioe.org> <87h9zb1yh7.fsf@usenet.ankman.de> <m19rvb$vq$1@speranza.aioe.org>
Mime-Version 1.0
Content-Type text/plain; charset=us-ascii
X-Trace news.albasani.net cp2OmAaFvkLo0fj9/thQ8BQF/dZibimSzvniMdEI8o/fRxRkpQOHObd418p6iAOiRQ9ZdYDif6olMLOCwdwKug==
NNTP-Posting-Date Sat, 11 Oct 2014 20:35:27 +0000 (UTC)
Injection-Info news.albasani.net; logging-data="yfeYBa1c/B8VLCPZ601ccrPfZgPFbP7xMgHt9dkI56oA53LMpAVAGUaqiDaJs+qhX2FiT5x5VGWNFhSepbrHZJlt+d1GDeCif5vxUsHMYPi4cPIHSnSx7a5tcau+raC6"; mail-complaints-to="abuse@albasani.net"
User-Agent Gnus/5.13 (Gnus v5.13) Emacs/23.4 (gnu/linux)
X-Face '#R~-oJz-_!iXhczPJ;=w1(`5-uQ2$0qHB7KKDV,]VoAC!P?swaa#m|eB<DkOt*XH=~9C[g S^w)b,)1q,{P\7Z3H,N(^m.YKuYM//B{X:PvbDk.|:g:$wVr*3*)[K6F+k\z-s32+oB]YJPy11wuGGz'bQAk~1.b1[;M{^A2@bboIENBB:Wd:<Fm~r7OuiJA1g}7KC-T'>Du+
Cancel-Lock sha1:h/Jk/jMWkdI75pnF08Uq+bNYrHg= sha1:M8Y7OsKdhl69NfTQjBf7qfLMsM4=
X-Face-What-Is-It Capture Bee from Galaga
Xref csiph.com comp.os.linux.misc:12290

Show key headers only | View raw

Bill Cunningham wrote on 10. October 2014:
>
> "Andreas Kohlbach" <oct14.5.ankman@spamgourmet.com> wrote in message 
> news:87h9zb1yh7.fsf@usenet.ankman.de...

[...]

>> And allow only the user(s) to log in you want. If your user is called
>> "bill" for example, open the /etc/ssh/sshd_config and locate or add the
>> line
>>
>> AllowUsers
>>
>> and add "bill" so it looks like
>>
>> AllowUsers bill
>>
>> You may add more users, separated by blanks. You need to restart the ssh
>> server after these changes.
>>
>> Now only bill can log in, no one else. Not even with the correct
>> password.
>>
>> Then there are iptable rules somewhere which limit access to the system
>> in a certain time interval.
>>
>> You cold also change the ssh port to something else than 22.
>
>     The only user I have is root. So I will try as you suggest.
>
> AllowUsers root
>
> Now will that work with root?

Never thought of this. Because it's a bad idea. Then an attacker gains
full control over your machine if he has the password. If he only got the
password to a non privileged account he still needs to find the root
password (local exploit or brute force).
-- 
Andreas

I wish my grass was emo. Then it would cut itself.

Back to comp.os.linux.misc | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 19:23 -0400
  Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-09 23:35 +0000
    Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-09 20:25 -0400
      Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 01:11 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:32 +0000
        Re: fedora 20 disabling ssh by default Baho Utot <baho-utot@columbus.rr.com> - 2014-10-10 17:59 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-09 23:13 -0400
      Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 08:50 +0000
        Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 09:10 +0000
          Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 10:16 +0100
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:05 -0400
              Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-11 07:47 +0100
          Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 09:26 +0000
            Re: fedora 20 disabling ssh by default The Natural Philosopher <tnp@invalid.invalid> - 2014-10-10 11:00 +0100
            Re: fedora 20 disabling ssh by default Bit Twister <BitTwister@mouse-potato.com> - 2014-10-10 10:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-10 10:29 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 16:27 -0400
          Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:41 +0000
            Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:03 -0400
              Re: fedora 20 disabling ssh by default John Hasler <jhasler@newsguy.com> - 2014-10-10 20:28 -0500
              Re: fedora 20 disabling ssh by default Robert Riches <spamtrap42@jacob21819.net> - 2014-10-11 02:52 +0000
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:03 +0000
                Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-11 14:38 -0400
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 18:05 -0400
                Re: fedora 20 disabling ssh by default Richard Kettlewell <rjk@greenend.org.uk> - 2014-10-11 23:18 +0100
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 23:43 +0000
                Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 22:34 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 19:13 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 00:30 +0000
                Re: fedora 20 disabling ssh by default Wayne <nospam@all.invalid> - 2014-10-11 21:27 -0400
                Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-12 02:14 +0000
              Re: fedora 20 disabling ssh by default Rich <rich@example.invalid> - 2014-10-11 03:59 +0000
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:34 +0000
  Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-10 15:31 +0000
  Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-10 16:06 -0400
    Re: fedora 20 disabling ssh by default "Bill Cunningham" <nospam@nspam.invalid> - 2014-10-10 20:00 -0400
      Re: fedora 20 disabling ssh by default William Unruh <unruh@invalid.ca> - 2014-10-11 17:02 +0000
      Re: fedora 20 disabling ssh by default Andreas Kohlbach <oct14.5.ankman@spamgourmet.com> - 2014-10-11 16:35 -0400
  Re: fedora 20 disabling ssh by default HakTar <FiteWinTel@gmail.com> - 2014-10-30 07:34 +0000

csiph-web