[Bug 1216] Warn via Logwatch when sshd PermitRootLogin is in effect

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=1216





------- Comment #2 from russell.don at gmail.com  2006-08-10 07:47 -------
(In reply to comment #1)
> I don't see any point to this.

The point is that after an initial install, root login is permitted via
a remote connection. (granted, authentication is still required, I'm
not suggesting that un-authenticated access is allowed.)

If people knew enough to add the suggested cron job, then they also
know enough to ensure the PermitRootLogin option is correct for their
own environment and therefore do not need the cron jb.

If sshd scheduled such a cron job when starting and seeing both
"PermitRootLogin yes" and "PermitRootLoginwarn yes" options set, there
would be no "surprises".

Thanks for your consideration.




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.