On Apr 02, Colin Watson <cjwatson@debian.org> wrote: > You could use a drop-in unit to wrap sshd in tcpd, as suggested by the > Fedora wiki page? This would avoid exposing sshd's process space to > libwrap and all the stuff it links to by default. This would require to switch to socket activation of sshd, which is not the default for good reasons. -- ciao, Marco
Attachment:
signature.asc
Description: PGP signature