From: Michael Shigorin <mike@osdn.org.ua> To: sysadmins@lists.altlinux.org Cc: Mikhail Gusarov <dottedmag@dottedmag.net>, Alexey Rusakov <ktirf@altlinux.ru> Subject: [Sysadmins] касательно доступа по ssh и других умолчаний Date: Thu, 15 May 2008 12:54:02 +0300 Message-ID: <20080515095402.GG5327@osdn.org.ua> (raw) Здравствуйте. Очень хорошо сформулированная мысль "если закрутить гайки слишком туго, это будет глупо, потому что они будут оторваны с мясом, не откручены ровно как на самом деле требуется": It seems like Ubuntu and similar distros have decided instead to throw their hands in the air and disable remote administation out of the box. In reality I'd guess that a large number of machines get the remote auth turned back on (with appropriate holes in the firewall) when the user realises how inconvenient this is. So it doesn't achieve our goal of making the user safer (though it does mean Ubuntu supporters can say Ubuntu isn't vulnerable to this problem, which gets them some cheerleading points) -- http://lwn.net/Articles/282303/ 2 ldv: то же самое, что было сказано о куче других вещей, включая passwdqc и особенно enforce=everyone (#12194). Может, отдельный метабаг для неуправляемо закрученных гаек завести? :) -- ---- WBR, Michael Shigorin <mike@altlinux.ru> ------ Linux.Kiev http://www.linux.kiev.ua/
reply other threads:[~2008-05-15 9:54 UTC|newest] Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions: You may reply publicly to this message via plain-text email using any one of the following methods: * Save the following mbox file, import it into your mail client, and reply-to-all from there: mbox Avoid top-posting and favor interleaved quoting: https://en.wikipedia.org/wiki/Posting_style#Interleaved_style * Reply using the --to, --cc, and --in-reply-to switches of git-send-email(1): git send-email \ --in-reply-to=20080515095402.GG5327@osdn.org.ua \ --to=mike@osdn.org.ua \ --cc=dottedmag@dottedmag.net \ --cc=ktirf@altlinux.ru \ --cc=shigorin@gmail.com \ --cc=sysadmins@lists.altlinux.org \ /path/to/YOUR_REPLY https://kernel.org/pub/software/scm/git/docs/git-send-email.html * If your mail client supports setting the In-Reply-To header via mailto: links, try the mailto: link
ALT Linux sysadmins discussion This inbox may be cloned and mirrored by anyone: git clone --mirror http://lore.altlinux.org/sysadmins/0 sysadmins/git/0.git # If you have public-inbox 1.1+ installed, you may # initialize and index your mirror using the following commands: public-inbox-init -V2 sysadmins sysadmins/ http://lore.altlinux.org/sysadmins \ sysadmins@lists.altlinux.org sysadmins@lists.altlinux.ru sysadmins@lists.altlinux.com public-inbox-index sysadmins Example config snippet for mirrors. Newsgroup available over NNTP: nntp://lore.altlinux.org/org.altlinux.lists.sysadmins AGPL code for this site: git clone https://public-inbox.org/public-inbox.git