Minimal Install Option

[Joe]

Chris Ricker wrote:

>On Thu, 21 Aug 2003, Pekka Savola wrote:
>
>  
>
>>On Thu, 21 Aug 2003, Chris Ricker wrote:
>>    
>>
>>>>I'm not sure you are disagreeing with me here. Are you saying don't
>>>>remote log in to a firewall at all, or are you agreeing with me?
>>>>        
>>>>
>>>I'm disagreeing. The last thing a fw should do is run a service, let 
>>>alone one with the security history of ssh.... Manage over serial.
>>>      
>>>
>>Disagree. Set your access controls in /etc/hosts.allow for sshd and you're 
>>done :-)
>>    
>>
>
>and then join the OpenSSL / OpenSSH exploit train.... No, thanks!
>
>This is all just proving my point, which was that no one can even agree 
>on what a minimal machine should be.
>
>  
>
"exploit train?" hmm, you don't seem to be quite up to speed on openssh 
- I suppose you haven't heard about privelege separation etc? openssh is 
just about the most secure connection method out there.

What do you propose for remote shell access, telnet?

Joe