Re: openssh-server's default config is dangerous

[Nemeth Gyorgy]

2016-07-12 14:50 keltezéssel, to...@tuxteam.de írta:
Hmmm. This would still allow password auth for user 1000 (and root (!)). 
No.
The default sshd config is:
PermitRootLogin prohibit-password

And openssh-server is optional package, it is not installed by default. 
I think if someone decides to install it he/she should know the 
consequences also.