Hi Axel,

On 07/24/2014 09:03 AM, Axel Beckert wrote:
Kevin Locke wrote:
Just wanted to express my support for including the patch in the
autossh package.  I was about to write an initscript for autossh for
my  own use before finding this bug report, but I've found the
attached script serves my purposes quite well and the quality seems
very good to me.  I'm sure other users from benefit from it as well.

I must admit that I'm reluctant to add an init script as I consider
automatically starting ssh sessions at boot up as something very
seldom (and IMHO dangerous).

Agree that it's likely rare. I'm basically using it as a poor-man's VPN to port-forward for a special-case application for a limited time.

But I'm curious why it might be dangerous. Is it a security concern or from a connection-stability perspective? Could be worth adding a comment to the docs to warn users against it if there's a common issue that it introduces. (I'm hardly an expert, but try not to compromise my systems too horribly.)

If it's not worth installing the init script by default, I'd recommend
including it in /usr/share/doc/autossh/examples as a reference.

That's a good idea!

Works for me.

One other note change that would probably be worth making would be to run autossh as a user other than root. It's hard to make this generic since the sysadmin will likely want to create an unprivileged user and install SSH keys for it to use. Perhaps another motivation for putting it in the examples with some usage notes.

Thanks,
Kevin


--
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to