F22 System Wide Change: Set sshd(8) PermitRootLogin=no

[Ian Malone]

On 14 January 2015 at 14:31, Simo Sorce <simo at redhat.com> wrote:
> On Wed, 14 Jan 2015 05:53:23 +0000 (UTC)
> P J P <pj.pandit at yahoo.co.in> wrote:
>

>> IMO, the ones opposing are those who fear their current
>> setups/practices would break. Because they need remote 'root' access
>> in their set-up. Which is a genuine use-case. And to support it, we
>> could provide an option to enable remote root access with
>> 'PermitRootLogin=Yes', based on the the user's response to Anaconda
>> at install time, as was suggested in previous email. However, let's
>> not assume _all_ Fedora users have this use-case.
>
> Workstation do not even enable sshd (IIRC) so this impacts the server
> images (cloud images already do their magic with sshd so I am not
> counting them here), and server has different use cases and security
> implications than a generic population.
>

Not just workstation, spin images, it's a decision pre-dating workstation.

-- 
imalone
http://ibmalone.blogspot.co.uk