On Apr 02, Colin Watson <cjwat...@debian.org> wrote:

> You could use a drop-in unit to wrap sshd in tcpd, as suggested by the
> Fedora wiki page?  This would avoid exposing sshd's process space to
> libwrap and all the stuff it links to by default.
This would require to switch to socket activation of sshd, which is not 
the default for good reasons.

-- 
ciao,
Marco

Attachment: signature.asc
Description: PGP signature

Reply via email to