On Lu, 27 ian 14, 20:24:42, Jon Danniken wrote: > Hello list, > > I recently came across a posting by an individual who got his > Debian machine compromised due to a number of security problems, one of > which was the default installation and running of sshd with > "PermitRootLogin = > Yes". in /etc/ssh/sshd_config.
That setting alone wouldn't get your machine compromised and changing it won't make your machine secure. Any user account used to get root is equally dangerous if not secured properly. Setting 'PasswordAuthentication' to 'no' is much more useful. Kind regards, Andrei -- http://wiki.debian.org/FAQsFromDebianUser Offtopic discussions among Debian users and developers: http://lists.alioth.debian.org/mailman/listinfo/d-community-offtopic http://nuvreauspam.ro/gpg-transition.txt
signature.asc
Description: Digital signature