please deactivate services by default!

Tomas Mraz tmraz at redhat.com
Thu Sep 25 18:39:33 UTC 2008


On Thu, 2008-09-25 at 13:30 -0500, Chris Adams wrote:
> Once upon a time, Tomas Mraz <tmraz at redhat.com> said:
> > On Thu, 2008-09-25 at 09:36 -0500, Chris Adams wrote:
> > > Once upon a time, Rahul Sundaram <sundaram at fedoraproject.org> said:
> > > > No. sshd has always been disabled on the live cd since it doesn't have a 
> > > > root password.
> > > 
> > > Wouldn't it be better to have sshd configured to either:
> > > 
> > > - block root logins
> > This is not yet done due to the requirement to be able to install a
> > server remotely through vnc without a kickstart file.
> > 
> > > - block logins to accounts with no password
> > This was always the case for sshd.
> 
> Okay, so the "sshd has always been disabled on the live cd since it
> doesn't have a root password" justification doesn't quite work (or does
> "PermitRootLogin yes" override "PermitEmptyPasswords no"?).
Yes, this justification doesn't work. But I can understand not having
sshd enabled on Live CD even without this justification.
-- 
Tomas Mraz
No matter how far down the wrong road you've gone, turn back.
                                              Turkish proverb




More information about the fedora-devel-list mailing list