Re: A Topic that needs to be discussed on next the QA meeting..

["Jóhann B. Guðmundsson" <johannbg hi is>]

Jesse Keating wrote:
> On Tue, 2008-03-18 at 05:10 +0000, Kevin Kofler wrote:
>   
> > I don't see why sshd would automatically imply "not for desktop users". You 
> > just replied to someone who uses it on his desktop (to access his desktop from 
> > remote machines, which is not even far-fetched unless you work from home and 
> > never travel). As soon as you have at least 2 computers (e.g. one desktop and 
> > one laptop, which is fairly common), you'll come to appreciate SSH (and SFTP 
> > which comes with it - how else is a desktop user who also owns a laptop going 
> > to transfer his/her data between the 2 machines? Through the Internet? How's 
> > that good for security?).
> >     
>
> I also use it frequently to scp files to my laptop from various other
> machines in my lab.
>
>   
Again both of you know what you are doing.

The only thing that needs to be done is removing openssh-server
from the default ( installation) package selection so that the user
who will actually is gonna use sshd and knows what he's doing
will have to choose to install the openssh-server package
vs the one that does not know what he's doing having to uncheck it
in the firewall and disable the service..

And yes it's ok to have the port 22 in the firewall still open since there
is nothing listening there anyway...

Best regards
                 Johann B.

begin:vcard
fn:Johann B.  Gudmundsson
n:Gudmundsson;Johann B. 
org:Reiknistofnun - University of Iceland;IT Management
adr:Dunhagi 5;;Taeknigardur;Reykavik;;107;Iceland
email;internet:johannbg hi is
title:Unix System Engineer RHCE,CCSA
tel;work:+3545254267
tel;fax:+3545528801
tel;pager:N/A
tel;home:N/A
tel;cell:N/A
url:http://www.rhi.hi.is
version:2.1
end:vcard