Re: Debian openssh option review: considering splitting out GSS-API key exchange
Marco d'Itri <[email protected]>
| Newsgroups | gmane.linux.debian.devel.ssh,gmane.linux.debian.devel.general |
|---|---|
| Message-ID | <[email protected]> |
On Apr 02, Colin Watson <[email protected]> wrote: > You could use a drop-in unit to wrap sshd in tcpd, as suggested by the > Fedora wiki page? This would avoid exposing sshd's process space to > libwrap and all the stuff it links to by default. This would require to switch to socket activation of sshd, which is not the default for good reasons. -- ciao, Marco
signature.asc
(application/pgp-signature, 228 B)
-----BEGIN PGP SIGNATURE----- iHUEABYIAB0WIQQnKUXNg20437dCfobLPsM64d7XgQUCZgvg4QAKCRDLPsM64d7X gQXzAQDrYd9HvLM1kq+HD7Zt2GbKVStdbGHUTABa1AcZZkYNnAD/QpDRsB3FLNVv xL0ln5Sza/BLkR4rGjKbD+vtvZQ04gU= =vWH2 -----END PGP SIGNATURE-----