> Hi > > On one of my Debian boxes, I need ssh, but no sshd. I especially don't want > to RUN sshd. I achieve this by stopping the daemon and removing all symlinks > to /etc/init.d/ssh in /etc/rc?.d/. However, every time ssh package gets > upgraded, I get those symlinks back and sshd restarted. To me, it is a > security concern, since unintended net services are run. Wouldn't it be > better to break ssh and sshd into two separate packages? Right know, at least > in Woody, sshd is part of ssh.
Why not configure sshd not to run the normal way? dpkg-reconfigure ssh When it asks "Do you want to run the sshd server" answer "no" instead of "yes". Eric