Re: Debian openssh option review: considering splitting out GSS-API key exchange

Marco d'Itri <[email protected]>
Newsgroups gmane.linux.debian.devel.ssh,gmane.linux.debian.devel.general
Message-ID <[email protected]>
On Apr 02, Colin Watson <[email protected]> wrote:

> You could use a drop-in unit to wrap sshd in tcpd, as suggested by the
> Fedora wiki page?  This would avoid exposing sshd's process space to
> libwrap and all the stuff it links to by default.
This would require to switch to socket activation of sshd, which is not 
the default for good reasons.

-- 
ciao,
Marco
signature.asc (application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE-----

iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZgvg4QAKCRDLPsM64d7X
gQXzAQDrYd9HvLM1kq+HD7Zt2GbKVStdbGHUTABa1AcZZkYNnAD/QpDRsB3FLNVv
xL0ln5Sza/BLkR4rGjKbD+vtvZQ04gU=
=vWH2
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.