On Wed, Oct 10, 2012 at 08:21:02PM -0600, Kevin Fenzi wrote:
> > I think turning off sshd by default but having a preset to turn it on
> > makes a lot of sense -- most places which will want it on will be
> > using kickstart, or else will otherwise have little problem enabling
> > it after the fact.
> I think that would confuse a lot of folks... many people expect ssh to
> be available on their desktop machines, etc. 

Yeah, but many are equally surprised that it's on by default. :) Any change
here would have to be accompanied both by documentation about the change and
clear docs telling people how to turn it on both by hand and in kickstart.


> Also, whats the gain? 
> less exposure to brute force password guessing? 

Yes, that's the gain. Or to a widespread but as-yet-unknown sshd exploit.


-- 
Matthew Miller  ☁☁☁  Fedora Cloud Architect  ☁☁☁  <mat...@fedoraproject.org>
-- 
devel mailing list
devel@lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/devel

Reply via email to