Re: openssh-server's default config is dangerous

[Nemeth Gyorgy <friczy@freemail.hu>]

2016-07-12 14:50 keltezéssel, tomas@tuxteam.de írta:
> Hmmm. This would still allow password auth for user 1000 (and root (!)). 
No.

The default sshd config is:
PermitRootLogin prohibit-password

And openssh-server is optional package, it is not installed by default. 
I think if someone decides to install it he/she should know the 
consequences also.