[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Remote administration of a server



Robert Brockway <rbrockway@opentrend.net>:
>  On Thu, 9 Jun 2005, Roberto C. Sanchez wrote:
> 
> > thing is a pain in the but.  At least on the Linux machines it is
> > straightforward and I set those up when I can to use keys instead of
> > passwords.
> 
>  May I introduce you to ssh-agent and ssh-add.  They are a standard part of 
>  ssh and will operate between implementations (as long as no one has broken 
>  their implementation).
> 
>  This is the last line of my ~/.xsession file:
> 
>  ssh-agent bash -c "ssh-add < /dev/null && /usr/bin/fvwm2"

And if anyone can get at your console, they can CTRL-ALT-Backspace to
get to a logged in shell prompt.  They may not still have your ssh-add
added keys, but they can certainly slot something in to get them the
next time you use them.

I prefer to ssh-add after an "exec /usr/bin/blackbox" in ~/.xsession,
followed by a password protected xscreensaver.  fwiw.


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)           http://www.spots.ab.ca/~keeling   Linux Counter #80292
- -           http://www.ietf.org/rfc/rfc1855.txt
    Spammers! http://www.spots.ab.ca/~keeling/autospam.html



Reply to: