*** This bug is a duplicate of bug 45416 ***

On Wed, Jun 21, 2006 at 04:00:25PM -0000, Colin Watson wrote:
> *** This bug is a duplicate of bug 45416 ***
> 
> See my comments in bug 22136, bug 25570, bug 28305, and especially bug
> 45416. I don't intend to change this. It is not true that there is no
> downside; see those other bugs.

I still don't see the advantage of PermitRootLogin=yes. It doesn't
prevent an attacker from breaking an user account and then using su to
get root access

But about every script kiddie attacking ssh is attacking root but much
less are attacking a given ordenary user (for most user names at least). 
When having the same password for root and an ordenary user chances are
higher that root willl be cracked just because chances are higher that
root will be attacked.


-- 
 Schönen Tag noch   
     Florian        # http://www.informatik.uni-freiburg.de/~diesch/
 --------------------------------------------------------------------------
   **  Hi! I'm a signature virus! Copy me into your signature, please!  **

-- 
sshd should not permit root login by default
https://launchpad.net/bugs/50577

--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to