From: Anton Farygin <rider@altlinux.com>
To: sisyphus@lists.altlinux.org
Subject: Re: [sisyphus] Q: openssh-server: AllowGroups by default
Date: Wed, 23 Jun 2010 16:33:02 +0400
Message-ID: <hvsusq$g9s$1@dough.gmane.org> (raw)
In-Reply-To: <20100623113535.GI18051@wo.int.altlinux.org>
23.06.2010 15:35, Dmitry V. Levin пишет:
> On Wed, Jun 23, 2010 at 12:14:14PM +0400, Андрей Черепанов wrote:
>> 23 июня 2010 Dmitry V. Levin написал:
>>> Это просто AllowGroups remote wheel в сочетании с реализованным в
>>> openssh-server-5.3p1-alt2...
>>>
>>> Собственно говоря, вы предлагаете по умолчанию сделать ещё и
>>> AllowGroups имена_групп_в_которые_будут_входить_те_кого_можно_пускать?
>> Кстати, весьма дельная идея и максимально понятная.
>
> За исключением выбора групп, легко реализуемая.
> Какие мне выбрать, чтобы всем угодить?
>
> Я предлагаю
> AllowGroups wheel users
> - эти группы создаются в системе по умолчанию.
>
> В сочетании с
> control sshd-allow-groups enabled|disabled
> никто не пострадает при обновлении.
Мне эта идея нравится.
>
>>> Будет непросто придумать имена таких групп, которые бы устроили всех
>>> заинтересованных.
>> Дима, а как в других дистрибутивах? Проводилось сравнение и анализ? Или у нас
>> снова свои велосипеды?
>
> Насколько мне известно, другие не парятся.
Всё верно, у RHEL можно идти под рутом по умолчанию по паролю.
next prev parent reply other threads:[~2010-06-23 12:33 UTC|newest]
Thread overview: 153+ messages / expand[flat|nested] mbox.gz Atom feed top
2010-06-22 21:44 [sisyphus] I: openssh-server-5.3p1-alt2: disabled PasswordAuthentication for "wheel" group members Dmitry V. Levin
2010-06-22 22:48 ` Igor Zubkov
2010-06-22 22:59 ` Dmitry V. Levin
2010-06-23 8:08 ` Андрей Черепанов
2010-06-23 8:11 ` Алексей Шенцев
2010-06-23 8:22 ` Андрей Черепанов
2010-06-23 8:34 ` Michael Shigorin
2010-06-23 10:07 ` Boris Savelev
2010-06-23 8:13 ` Alexey I. Froloff
2010-06-23 8:20 ` Андрей Черепанов
2010-06-23 9:48 ` Vitaly Kuznetsov
2010-06-23 12:12 ` Michael Shigorin
2010-06-23 13:12 ` Андрей Черепанов
2010-06-23 8:21 ` [sisyphus] [JT] quests (was: I: openssh-server-5.3p1-alt2) Michael Shigorin
2010-06-23 10:57 ` [sisyphus] I: openssh-server-5.3p1-alt2: disabled PasswordAuthentication for "wheel" group members Dmitry V. Levin
2010-06-23 11:10 ` Anton Farygin
2010-06-23 11:13 ` Dmitry V. Levin
2010-06-23 11:18 ` Anton Farygin
2010-06-23 14:03 ` Michael Shigorin
2010-06-23 13:20 ` Андрей Черепанов
2010-06-22 22:51 ` Evgeny Sinelnikov
2010-06-22 23:18 ` Dmitry V. Levin
2010-06-23 8:31 ` Michael Shigorin
2010-06-23 11:01 ` Dmitry V. Levin
2010-06-23 12:59 ` Mikhail Efremov
2010-06-24 3:30 ` Gleb Kulikov
2010-06-22 22:53 ` Michael Shigorin
2010-06-22 23:08 ` Dmitry V. Levin
2010-06-22 23:23 ` Кокарев Константин
2010-06-22 23:35 ` Dmitry V. Levin
2010-06-23 0:48 ` Кокарев Константин
2010-06-23 0:52 ` Dmitry V. Levin
2010-06-23 1:02 ` Кокарев Константин
2010-06-23 1:14 ` Dmitry V. Levin
2010-06-23 1:39 ` Кокарев Константин
2010-06-22 23:32 ` Evgeny Sinelnikov
2010-06-22 23:45 ` Dmitry V. Levin
2010-06-23 9:28 ` Alexey Gladkov
2010-06-23 11:44 ` [sisyphus] Q: sshd-password-auth/sshd-allow-groups Dmitry V. Levin
2010-06-23 11:53 ` Vitaly Kuznetsov
2010-06-23 13:06 ` Dmitry V. Levin
2010-06-23 14:07 ` Michael Shigorin
2010-06-23 14:52 ` Dmitry V. Levin
2010-06-23 14:08 ` Anton Farygin
2010-06-23 17:08 ` [sisyphus] I: openssh-server-5.3p1-alt3 Dmitry V. Levin
2010-06-23 10:01 ` [sisyphus] I: openssh-server-5.3p1-alt2: disabled PasswordAuthentication for "wheel" group members Anton Farygin
2010-06-23 12:25 ` Michael Shigorin
2010-06-23 12:24 ` [sisyphus] Q: sshd-password-auth/sshd-allow-groups Michael Shigorin
2010-06-23 12:33 ` Dmitriy Kruglikov
2010-06-23 14:08 ` Michael Shigorin
2010-06-23 14:27 ` Dmitriy Kruglikov
2010-06-25 11:51 ` [sisyphus] [x] remote access (was: Q: sshd-password-auth/sshd-allow-groups) Michael Shigorin
2010-06-25 12:46 ` Michael Shigorin
2010-06-25 12:59 ` Dmitriy Kruglikov
2010-06-25 13:04 ` Michael Shigorin
2010-06-25 13:13 ` Dmitriy Kruglikov
2010-06-22 23:50 ` [sisyphus] I: openssh-server-5.3p1-alt2: disabled PasswordAuthentication for "wheel" group members Evgeny Sinelnikov
2010-06-23 0:03 ` Dmitry V. Levin
2010-06-23 0:17 ` Evgeny Sinelnikov
2010-06-23 0:19 ` Dmitry V. Levin
2010-06-23 0:34 ` Evgeny Sinelnikov
2010-06-23 0:47 ` Dmitry V. Levin
2010-06-23 7:53 ` Michael Shigorin
2010-06-23 7:54 ` Michael Shigorin
2010-06-23 11:22 ` Dmitry V. Levin
2010-06-25 11:52 ` Michael Shigorin
2010-06-27 20:12 ` Dmitry V. Levin
2010-06-23 0:39 ` Dmitry V. Levin
2010-06-23 8:14 ` Андрей Черепанов
2010-06-23 11:35 ` [sisyphus] Q: openssh-server: AllowGroups by default Dmitry V. Levin
2010-06-23 12:33 ` Anton Farygin [this message]
2010-06-23 12:54 ` Michael Shigorin
2010-06-23 12:59 ` Dmitriy Kruglikov
2010-06-23 9:58 ` [sisyphus] I: openssh-server-5.3p1-alt2: disabled PasswordAuthentication for "wheel" group members Anton Farygin
2010-06-23 11:05 ` Anton Gorlov
2010-06-23 11:11 ` Evgen
2010-06-23 11:15 ` Anton Farygin
2010-06-24 4:24 ` Evgen
2010-06-23 11:21 ` Slava Dubrovskiy
2010-06-24 4:19 ` Eugene Prokopiev
2010-06-22 23:18 ` Vladislav Zavjalov
2010-06-22 23:21 ` Dmitry V. Levin
2010-06-22 23:22 ` Vladislav Zavjalov
2010-06-22 23:33 ` Dmitry V. Levin
2010-06-22 23:49 ` Vladislav Zavjalov
2010-06-23 10:06 ` Anton Farygin
2010-06-23 12:12 ` Michael Shigorin
2010-06-23 0:26 ` Dmitry V. Levin
2010-06-23 10:04 ` Anton Farygin
2010-06-23 7:23 ` Sergey
2010-06-23 10:08 ` Anton Farygin
2010-06-23 11:03 ` Dmitry V. Levin
2010-06-23 11:12 ` Anton Farygin
2010-06-23 11:25 ` Алексей Шенцев
2010-06-23 11:28 ` Dmitry V. Levin
2010-06-23 12:36 ` Anton Farygin
2010-06-23 14:03 ` Алексей Шенцев
2010-06-23 12:34 ` Anton Farygin
2010-06-23 11:25 ` Dmitry V. Levin
2010-06-23 13:00 ` Michael Shigorin
2010-06-23 11:26 ` Sergey
2010-06-23 11:49 ` Vladislav Zavjalov
2010-06-23 12:37 ` Anton Farygin
2010-06-23 11:13 ` Sergey
2010-06-23 11:40 ` Sergey
2010-06-23 12:55 ` Michael Shigorin
2010-06-23 8:49 ` Gleb Kulikov
2010-06-23 11:08 ` Dmitry V. Levin
2010-06-24 3:24 ` Gleb Kulikov
2010-06-24 6:33 ` Anton Farygin
2010-06-24 6:50 ` Gleb Kulikov
2010-06-24 6:55 ` Motsyo Gennadi aka Drool
2010-06-24 7:02 ` Sergey
2010-06-24 8:54 ` Motsyo Gennadi aka Drool
2010-06-24 10:08 ` Anton Farygin
2010-06-24 10:24 ` Motsyo Gennadi aka Drool
2010-06-24 11:04 ` Anton Farygin
2010-06-24 11:35 ` Motsyo Gennadi aka Drool
2010-06-24 11:42 ` Mykola S. Grechukh
2010-06-24 11:46 ` Motsyo Gennadi aka Drool
2010-06-24 11:51 ` Mykola S. Grechukh
2010-06-24 11:58 ` Motsyo Gennadi aka Drool
2010-06-24 12:01 ` Mykola S. Grechukh
2010-06-24 12:01 ` Anton Farygin
2010-06-24 12:15 ` Motsyo Gennadi aka Drool
2010-06-24 12:38 ` Dmitry V. Levin
2010-06-24 13:07 ` Anton Farygin
2010-06-24 13:10 ` Dmitriy Kruglikov
2010-06-24 15:23 ` Anton Farygin
2010-06-24 15:40 ` Dmitriy Kruglikov
2010-06-24 13:38 ` Motsyo Gennadi aka Drool
2010-06-24 14:54 ` Dmitry V. Levin
2010-06-24 15:55 ` Денис Смирнов
2010-06-25 4:15 ` Eugene Prokopiev
2010-06-25 4:22 ` Anton Farygin
2010-06-25 7:44 ` Денис Смирнов
2010-06-25 9:04 ` Eugene Prokopiev
2010-06-25 9:49 ` Денис Смирнов
2010-06-25 10:40 ` Eugene Prokopiev
2010-06-25 9:05 ` Sergei Epiphanov
2010-06-25 9:51 ` Денис Смирнов
2010-06-25 10:06 ` Sergei Epiphanov
2010-06-25 18:40 ` Денис Смирнов
2010-06-25 13:01 ` Slava Dubrovskiy
2010-06-29 3:41 ` Денис Смирнов
2010-06-25 11:33 ` [sisyphus] [JT] " Michael Shigorin
2010-06-25 11:40 ` Aleksey Novodvorsky
2010-06-25 12:48 ` Michael Shigorin
2010-06-25 12:14 ` Mykola S. Grechukh
2010-06-25 12:47 ` Michael Shigorin
2010-06-24 12:00 ` [sisyphus] " Anton Farygin
2010-06-24 8:08 ` Anton Farygin
2010-06-24 8:09 ` Anton Farygin
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to='hvsusq$g9s$1@dough.gmane.org' \
--to=rider@altlinux.com \
--cc=sisyphus@lists.altlinux.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
ALT Linux Sisyphus discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/sisyphus/0 sisyphus/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 sisyphus sisyphus/ http://lore.altlinux.org/sisyphus \
sisyphus@altlinux.ru sisyphus@altlinux.org sisyphus@lists.altlinux.org sisyphus@lists.altlinux.ru sisyphus@lists.altlinux.com sisyphus@linuxteam.iplabs.ru sisyphus@list.linux-os.ru
public-inbox-index sisyphus
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.sisyphus
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git