On Wed, May 27, 2015 at 05:44:02PM +0200, Christoph Anton Mitterer wrote: > On Wed, 2015-05-27 at 15:38 +0100, Colin Watson wrote: > > The specific case that prompted the banner in the first place was that > > of a university trying to ensure that systems on its network was secure, > > where the central administration doesn't have direct access to upgrade > > packages nor any other such reliable way to determine package versions, > > but does have the ability to disconnect vulnerable systems if need be. > > Here I have to disagree with Colin. > The purpose of the SSH has never been to do package management and/or > Nagios-like tasks like software version reporting. > If big sites want to monitor their current SSH version state they should > better use the tools made for it (check_apt or whatever).
Nagios is fine if you're running a server farm. It's useless if your purpose is to perform friendly probing of a large heterogeneous network most of which consists of desktop-type systems not run by professional sysadmins. -- Colin Watson [cjwat...@debian.org] -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
