Nerijus Baliunas wrote:
> On Thu, 27 May 2010 08:36:03 -0500 Mike McCarty <[email protected]> 
> wrote:
> 
>> It would make sense that the rkhunter from the RPM supplied
>> by Red Hat might know about that default, but I'm not sure
>> that what you suggest is the best way. Doesn't ALLOW_SSH_PROT_V1=1
>> instruct rkhunter to consider allowing version 1 not to be
>> a reportable event? If so, then if someone put
>>
>> Protocol 2,1
>>
>> into his configuration file, no report would be generated. Is
>> that really what you want?
> 
> I asked to set ALLOW_SSH_PROT_V1=2 according to John's
> recommendation - https://bugzilla.redhat.com/show_bug.cgi?id=596775
> With this setting rkhunter does warn when there is "Protocol 1" in 
> sshd_config.

Ok, that makes more sense, and is probably a reasonable thing
to do for a version for a specific distribution.

Mike
-- 
p="p=%c%s%c;main(){printf(p,34,p,34);}";main(){printf(p,34,p,34);}
Oppose globalization and One World Governments like the UN.
This message made from 100% recycled bits.
You have found the bank of Larn.
I speak only for myself, and I am unanimous in that!

------------------------------------------------------------------------------

_______________________________________________
Rkhunter-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/rkhunter-users

Reply via email to