Mailinglist Archive: opensuse-factory (626 mails)

["Richard (MQ)" <osl2008@xxxxxxxxxxxxxx>]

Arvin Schnell wrote:
> On Fri, Mar 28, 2008 at 03:28:59PM +0100, Marcus Meissner wrote:
> > Hi,
> >
> > We are thinking about disabling the ssh daemon by default.
> >
> > Reason is that it most desktop users do not use it all
> > and it is just taking away memory for those, and also
> > presenting an attack surface once the firewall is disabled.
>
> Why not combine it with the firewall setting?
>
> IIRC there is already the option to open the SSH port in the
> network setup during installation so simply start sshd when the
> port is opened there.

+1

Users who use ssh will in general know about the firewall etc. too, 
others probably shouldn't have it enabled.

Having said that - surely the memory footprint must be fairly small, and 
ssh security bugs are fairly rare ! ;-)


> Or make an extra item in the network setup for SSH just like for
> VNC (or combine those two).

Combining them makes sense - my argument above applies here too.
---------------------------------------------------------------------
To unsubscribe, e-mail: opensuse-factory+unsubscribe@xxxxxxxxxxxx
For additional commands, e-mail: opensuse-factory+help@xxxxxxxxxxxx