Re: Bug#122188: ssh: ssh should start earlier
Russell Coker <firstname.lastname@example.org> wrote:
> On Mon, 15 Sep 2003 12:00, Andrew Pimlott wrote:
>> I think this is basically a good idea. My ideal would be for sshd
>> start early (as soon as /usr is mounted, before attempting to mount
>> other filesystems) with a minimal config that allows only root
>> logins, then restart later with the normal config. This would be a
>> creat option to offer out-of-the-box, though I guess it would take a
>> little bit of juggling to get right.
> Having sshd allow root logins during the boot process when you don't
> allow such logins while the machine is fully operational seems like
> a bad idea.
> If allowing root logins is not considered to be a security problem
> then they should be allowed at all times.
Debian's "out-of-the-box" ssh config features PermitRootLogin yes,
therefore Andrew's suggestion boils down to "early ssh allows login
_only_ for root, restarted ssh allows login for all users, including
root" instead of "root" vs. "everbody but root" as you read it.
Hey, da ist ein Ballonautomat auf der Toilette!
Unofficial _Debian-packages_ of latest unstable _tin_