[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: passwordless ssh root logins stopped working after testing dist-upgrade



On Tue, 6 Apr 2010 14:12:19 -0400 (EDT), Russell L. Carter wrote:
>
> I dist-upgraded yesterday and ssh root logins started requiring a
> password.

OK, I'll bite.  Not that this is any of my business, but why do you
allow *root* logins via *ssh* _without_ a password.  Isn't that dangerous?
At my shop, our policy is that root is not allowed to login via ssh
at all.  root can only login from the system console.  To login as
root via ssh, one must login as a normal user first, then su to root.
But you not only allow root to login via ssh, you don't even require
a password!  That sounds like a security hole big enough to drive a
tank through!  Would you mind explaining why you do this?

-- 
  .''`.     Stephen Powell    <zlinuxman@wowway.com>
 : :'  :
 `. `'`
   `-


Reply to: