![]() |
network security
A thought just came to mind, if I can ssh to my N800 from my pc as root, then so can anyone from the internet if I'm on a public access point, while the risk is low, it is not the best security practice.
Changing the root password appears to break the application manger gui. So as a paranoid user, I have edited /etc/ssh/sshd_config adding the following line: DenyUsers root@* and now to ssh into the device, I have to go in as "user" and run sudo gainroot, of course the user account is password protected :) |
Re: network security
well if you simply set PermitRootLogin to "no" or "without-password" you would accomplish pretty much the same, but (in the case of "without-password") still allow yourself to generate an ssh key and get on the device as root with that key.
guess there is more than one way to skin a cat... |
Re: network security
What brendan says is good advice, and .Ray's solution also works, but I thought I should point out that changing the root password should not break anything. I have changed the root password after every firmware upgrade (exactly because I have an ssh server installed), and this has no side effects at all.
|
All times are GMT. The time now is 03:38. |
vBulletin® Version 3.8.8