[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [suse-security] Per domain/host options for sshd?

On Friday 04 June 2004 03:55, Frank Steiner wrote:
> When you have different logins with different passwords, hacking one
> does not mean that you can login to the other, too. Excpect when you
> install authorized keys between these two accounts. That's what we
> want to prevent.

Authorized keys from a hacked machine is only a problem if you
create no passphrase when the keys were created.  With a
passphrase protected authorized key even a hacked machine
(or stolen laptop) does not put you at further risk.

John Andersen

Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-help@xxxxxxxx
Security-related bug reports go to security@xxxxxxx, not here