Re: [Savannah-hackers-public] New sshd configuration

2019-01-05 Thread Bob Proulx
Bob Proulx wrote: > Bob Proulx wrote: > > AuthorizedKeysCommandUser root > > Match User root > > AuthorizedKeysCommand /bin/true > > Match all > > AuthorizedKeysCommand /root/bin/sv_get_authorized_keys > > > > I have tested that locally. Seems to do the desired thing. A

Re: [Savannah-hackers-public] New sshd configuration

2019-01-04 Thread Bob Proulx
Bob Proulx wrote: > AuthorizedKeysCommandUser root > Match User root > AuthorizedKeysCommand /bin/true > Match all > AuthorizedKeysCommand /root/bin/sv_get_authorized_keys > > I have tested that locally. Seems to do the desired thing. And that > was what prevented me fr

[Savannah-hackers-public] New sshd configuration

2019-01-04 Thread Bob Proulx
Hackers, FYI... I am going to change the sshd configuration to avoid the dependency even of root logging in that the database is available. AuthorizedKeysCommandUser root Match User root AuthorizedKeysCommand /bin/true Match all AuthorizedKeysCommand /root/bin/sv_get_au