[Asterisk-Users] asterisk@home scary log (OT)

Dana Olson rickaster at gmail.com
Fri Feb 11 07:05:43 MST 2005


On Fri, 11 Feb 2005 09:00:49 -0500, Dana Olson <rickaster at gmail.com> wrote:
> On Thu, 10 Feb 2005 14:05:38 -0600, Kristian Kielhofner <kris at krisk.org> wrote:
> > Derek Whitten wrote:
> > > I also call bullshit.. OpenBSD does NOT allow ssh root login by
> > > default.. why do you think that they have such an excellent security
> > > track record..
> >
> > Derek,
> >
> >        I am sorry to say, that in fact, OpenBSD does allow SSH root logins by
> > default:
> >
> > http://www.openbsd.org/cgi-bin/cvsweb/~checkout~/src/usr.bin/ssh/sshd_config?rev=1.70&content-type=text/plain
> >
> > BTW, OpenBSD's track record of security has nothing to do with whether
> > they allow root logins by default or not.  If the admin isn't wise
> > enough to pick a -decent- root password they shouldn't be running a box
> > connected to the internet.
> >
> > I think people need to start to provide HARD FACTS in some of these posts.
> >
> > I don't see what any of this has to do with Asterisk...
> >
> > --
> > Kristian Kielhofner
> 
> Unless I'm missing something, the only line that is ENABLED in that
> file is this one:
> 
> Subsystem       sftp    /usr/libexec/sftp-server
> 
> The rest appear to be commented out with #, unless I'm not
> understanding how that all works...
> --
> Dana
> 

Nevermind. I see how it is... Good thing I'm not a BSD admin.
--
Dana



More information about the asterisk-users mailing list