[prev in list] [next in list] [prev in thread] [next in thread] 

List:       debian-devel
Subject:    Re: Debian openssh option review: considering splitting out GSS-API key exchange
From:       Marco d'Itri <md () Linux ! IT>
Date:       2024-04-02 10:41:37
Message-ID: Zgvg4Un_bUIhHaqm () bongo ! bofh ! it
[Download RAW message or body]


On Apr 02, Colin Watson <cjwatson@debian.org> wrote:

> You could use a drop-in unit to wrap sshd in tcpd, as suggested by the
> Fedora wiki page?  This would avoid exposing sshd's process space to
> libwrap and all the stuff it links to by default.
This would require to switch to socket activation of sshd, which is not 
the default for good reasons.

-- 
ciao,
Marco

["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]