Re: [SLE] rkhunter warnings[SOLVED]

On Wednesday 29 December 2004 10:11, Sunny wrote:

On Wed, 29 Dec 2004 10:05:48 -1000, Susemail wrote:

...

I will change it to no but that shouldn't make any difference. Is there some other way this could be being set to yes? How do I disable the SSH1 protocal?

Thanks, Jerome

In /etc/ssh/sshd_config

There should be:

#Protocol 2,1

Uncomment it, and remove ",1"

So, it will look like:

Protocol 2

This will deny ver.1 of ssh.

Sunny

-- On Wednesday 29 December 2004 20:05, Susemail wrote: #PermitRootLogin yes #StrictModes yes

I will change it to no

~ this will make one huge difference, and, is what you need :)

I found it but it's already commented out:

# Authentication:

#LoginGraceTime 2m #PermitRootLogin yes #StrictModes yes

I will change it to no but that shouldn't make any difference.

It does make a difference, from the comments right at the top of sshd_config "# The strategy used for options in the default sshd_config shipped with # OpenSSH is to specify options with their default value where # possible, but leave them commented. Uncommented options change a # default value." So, the uncommented line shows you the DEFAULT situation unless you change it... Scott Problem solved. Thanks to Sunny, riccardo, and Scott. Jerome