-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Hans-Werner Hilse wrote:
> Hi,

Hi!

> So I would definately prefer to always have a guaranteed working sshd
> running (I find OpenVPN/telnet a bit strange and an unnecessary
> potential security hole).

If running permanently, then I agree, but I do not see the potential security 
hole if using a
correctly designed/configured tunnel.

> session. So you have to weight the risks. The real problem, however,
> can only be overcome by another way to login. Firing up another
> instance of sshd (on a different port) is just a matter of one simple
> command, so I definately prefer that.

As long as there is no issue with the sshd binary, of course :)

- --
Arturo "Buanzo" Busleiman - Consultor Independiente en Seguridad Informatica
Servicios Ofrecidos: http://www.buanzo.com.ar/pro/
Unase a los Foros GNU/Buanzo - La palabra Comunidad en su maxima expresion.
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFG7qOfAlpOsGhXcE0RCnGRAJ9fQIcJWbai4w/Daq81DPL1iEgaEgCfWkGg
Apixlnkoih+SMOPShj6SpVA=
=sBTB
-----END PGP SIGNATURE-----
-- 
[EMAIL PROTECTED] mailing list

Reply via email to