Re: Review for "PermitRootLogin without-password" change

[Matthew Vernon <matthewv@chiark.greenend.org.uk>]

Colin Watson <cjwatson@debian.org> writes:

> After (how can I put it) extensive and heated discussion over many
> years, I intend to change sshd_config in new installations of
> openssh-server to use "PermitRootLogin without-password" rather than
> "PermitRootLogin yes".  

How are we going to deal with the bootstrapping problem? i.e. how are
we expecting people to populate /root/.ssh/authorized_keys for new
installs? 

Regards,

Matthew

-- 
"At least you know where you are with Microsoft."
"True. I just wish I'd brought a paddle."
http://www.debian.org