On 11/21/2014 08:34 AM, Jan Kratochvil wrote:
On Fri, 21 Nov 2014 08:11:27 +0100, P J P wrote:
Does it make sense to disable remote root login by default? If so, do we need to just report it to the maintainer or it would be treated as a feature?
Almost all of my Fedora installations are test VMs where any security is irrelevant.
Just my use case, not saying if it is good or bad in general.
I think it's a valid use case, but rather poorly supported at the moment. For example, there should be completely seemless SSH login from virt-manager for user-manageable virtual machines (both as root and the user).
My point is that once we address this (most likely through some configuration generation during VM setup), we can also switch PermitRootLogin on.