F22 System Wide Change: Set sshd(8) PermitRootLogin=no

[Simo Sorce]

On Tue, 13 Jan 2015 17:09:16 +0000 (UTC)
P J P <pj.pandit at yahoo.co.in> wrote:

>   Hello Dennis,
> 
> 
> > On Tuesday, 13 January 2015 10:05 PM, Dennis Gilmore wrote:
> > There is no consensus on that.
> 
>   Well, no opposition as such either.

Sorry this is false.
You got enough emails telling you this change is undesirable, that's
the definition of opposition and means you have no _consensus_.

Simo.

> How is it done otherwise,
> do we conduct votes to establish consensus, is that a usual practice?
> 
> > I do not do enough installs that I use kickstart so can not put
> > a key in place. On a freshly installed system I have to log in
> > as root with a password to do configuration. I strongly suspect
> > that I am not alone here. You need to talk to the anaconda team
> > and work out a plan to deal with all the different options.
> > up to and including having the current defaults exist when only a
> > root account is configured with only a password for authentication.
> > I suspect that to properly support making changes here it needs to
> > be strongly tied into anaconda changes that manage the initial sshd
> > config file.
>   True. I plan to talk to them about the proposed workflow changes;
> One of which caters to the case wherein only 'root' user is needed.
> 
>   "Omission of such user account should prompt user if they wish to
> enable remote 'root' login and set the parameter appropriately."  OR
> Other way could be to just enable remote 'root' login when no
> non-root account is created by the user.
> 
> Let's see, they might have other suggestions.
> ---Regards
>    -Prasad
> http://feedmug.com



-- 
Simo Sorce * Red Hat, Inc * New York