https://bugzilla.novell.com/show_bug.cgi?id=467191 User anicka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=467191#c1 Anna Bernathova changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |NEEDINFO Info Provider| |security-team@suse.de --- Comment #1 from Anna Bernathova 2009-01-19 02:18:25 MST --- Security team, what is your opinion, should we change the default settings? Or we should be afraid of it because it could break something for someone? Personally I think that changing the default now would do more harm than good (people who do not understand anything will shoot themselves in the foot anyway, the rest might be surprised). Maciej: As ssh is blocked by firewall by default, I am not really afraid of this default option. Saying that we are suggesting otherwise is simply not true, please just do not be afraid to read the huge paragraph at the beginning of the config file: # The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value. Users that do not read even the basic documentation IMHO cannot be helped anyway. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=467191 User anicka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=467191#c3 Anna Bernathova changed: What |Removed |Added ---------------------------------------------------------------------------- Status|NEW |RESOLVED Resolution| |WONTFIX --- Comment #3 from Anna Bernathova 2009-01-19 03:14:53 MST --- So it is wontfix then... and not starting sshd by default is not really necessary because it is blocked by default. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=467191 User anicka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=467191#c5 Anna Bernathova changed: What |Removed |Added ---------------------------------------------------------------------------- Status|REOPENED |RESOLVED Resolution| |WONTFIX --- Comment #5 from Anna Bernathova 2009-01-19 08:16:40 MST --- Ummm... so once again. In the header of the config file, there is written that by default, config file contains commented default values. It is true, because there is written # PermitRootLogin yes and root is really allowed to log in by default. If I do what you suggest and change it to # PermitRootLogin no I will mislead our users who will think that default behavior is "root login disallowed" (because documentation states so), they might leave it commented and think they are perfectly safe, while root can still login. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.

https://bugzilla.novell.com/show_bug.cgi?id=467191 User anicka@novell.com added comment https://bugzilla.novell.com/show_bug.cgi?id=467191#c7 --- Comment #7 from Anna Bernathova 2009-01-19 14:22:30 MST --- It would be a good idea to read the whole paragraph, not only one sentence out of the context. You might find out what the paragraph really means then. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.