Hi,

[probably also applies to more templates]

the default security of debian template is horrible. Default sshd_config
permits root login with password and sets the default password to
'root'.

Please at least pull changes from:
https://bugs.debian.org/758643
https://bugs.debian.org/758647

Note that this needs pwgen to generate new password, so you might
want to generate random password using some common tool or method
(openssl, etc...)

And please do a similar security audit of all templates shipping with
lxc,
I have also seen ubuntu/ubuntu in the ubuntu template...

Cheers,
-- 
Ondřej Surý <[email protected]>
Knot DNS (https://www.knot-dns.cz/) – a high-performance DNS server
_______________________________________________
lxc-devel mailing list
[email protected]
http://lists.linuxcontainers.org/listinfo/lxc-devel

Reply via email to