Re: Hacks

Andy Burns wrote:

On 27/02/2007 11:04, Tim wrote:

You might consider these things to beef up sshd:

1) Limit the allowed ssh logins to specific usernames - best see the
documentation for how to - I don't recall the specifics.

2) Patch sshd with any Fedora security updates.

3) Deny root logins using both step 1 and explicitly in the sshd_config
(there is an option for it).

4) setup SSH to *only* use certificate base login, and allowing root
login from trusted subnet(s) only.

A very good solution, if it is practical. I've never found it necessary to
go to these lengths though.

Cheers

Tim
.