[Sugar-devel] links and commands for supporting development

[Sascha Silbe]

On Wed, Dec 09, 2009 at 05:20:21PM -0200, Tomeu Vizoso wrote:

> PermitRootLogin yes
> PasswordAuthentication yes
> PermitEmptyPasswords yes
I'd recommend using key based authentication instead and would 
_strongly_ advise against using "PermitEmptyPassword yes". Any use case 
for the latter is better solved with an unencrypted (i.e. no passphrase) 
keyfile.

PermitRootLogin without-password
PubkeyAuthentication yes
PermitEmptyPasswords no
PasswordAuthentication no


There are worms out there (yes, there's malware even on Linux!) trying 
to get into ssh accounts with poorly chosen passwords. Don't provide 
them any opportunity to infect even more hosts.


CU Sascha

-- 
http://sascha.silbe.org/
http://www.infra-silbe.de/
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 489 bytes
Desc: Digital signature
Url : http://lists.sugarlabs.org/archive/sugar-devel/attachments/20091209/0d4c8f60/attachment.pgp