[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#483756: insist ssh-vulnkey -a be run by the administrator upon upgrade



Colin Watson [31/05/08 00:31 +0100]:
Sure, but that's a problem with *their* machine (i.e. it allows access
from unauthorised persons) rather than a problem with your machine. The
sshd blacklisting will prevent this problem on their side - you might
send them an updated key but you won't be able to log in with it.

Not allowed access as much as "found a compromised key in ~/.ssh and warned
him". He has another - perfectly good and uncompromised - key he appears to
have been using ..

	srs



Reply to: