Re: Abotu setting 'PermitRootLogin=no' in sshd_config

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



On 11/21/2014 09:04 AM, P J P wrote:
>> On Friday, 21 November 2014 1:24 PM, Florian Weimer wrote:
> 
>>> On 11/21/2014 08:34 AM, Jan Kratochvil wrote:
>>> Almost all of my Fedora installations are test VMs where
>>> any security is irrelevant.
> 
>    Okay. But does enabling root login offer any significant benefit in that? IOW, if it's disabled by default, would it cause any significant inconvenience/troubles?? If not, it better be disabled by default.

For example for me it would be some inconvenience. I also use a lot of Fedora
VMs for
testing and none of them has regular user, just root.

However I can see the benefits of disabling root login by default. Especially
from the security point of view. I think it would be a good move.

Regards,
Tomas

>> I think it's a valid use case, but rather poorly supported at the 
>> moment.  For example, there should be completely seemless SSH login from 
>> virt-manager for user-manageable  virtual machines (both as root and the 
>> user).
>>
>> My point is that once we address this (most likely through some 
>> configuration generation during VM setup), we can also switch 
>> PermitRootLogin on.
> 
> 
>   You mean off? Or that we disable it by default and enable it while setting up a new VM?
> 
> ---
> Regards
>    -Prasad
> http://feedmug.com
> 
-- 
devel mailing list
devel@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/devel
Fedora Code of Conduct: http://fedoraproject.org/code-of-conduct





[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[Index of Archives]     [Fedora Announce]     [Fedora Kernel]     [Fedora Testing]     [Fedora Formulas]     [Fedora PHP Devel]     [Kernel Development]     [Fedora Legacy]     [Fedora Maintainers]     [Fedora Desktop]     [PAM]     [Red Hat Development]     [Gimp]     [Yosemite News]
  Powered by Linux