More SSH 'trolling'

David L Norris dave at webaugur.com
Thu Oct 14 18:12:59 UTC 2004


On Thu, 2004-10-14 at 13:07 -0400, Scot L. Harris wrote:
> In /etc/sshd/sshd_config you want to have the following lines:
> 
> PermitRootLogin no
> 
> AllowUsers  selectusernames

You can also create a 'remote' group, add only those users who need
remote access and then add this to sshd_config:
  AllowGroups remote

That way you can specify who can login remotely via SSH with any of the
user management tools.  I think it would be nice if this was the
default.  FirstBoot could add the first normal user to the remote group
automatically, for example.

-- 
 David Norris
  http://www.webaugur.com/dave/
  ICQ - 412039
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://listman.redhat.com/archives/fedora-list/attachments/20041014/548174ba/attachment-0001.sig>


More information about the fedora-list mailing list