Tyler Johnson
2012-Feb-14 04:14 UTC
load/reload shorewall-lite without root ssh access to client?
Several people I work with are objecting to using shorewall-lite on the grounds that it requires "PermitRootLogin yes" in the client''s sshd config. Is there a good way to work around this requirement? I assume sudo is the answer, but I don''t see much discussion of this. Thanks! -Tyler -- Tyler Johnson http://itgardeners.com ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d
Benny Pedersen
2012-Feb-14 06:30 UTC
Re: load/reload shorewall-lite without root ssh access to client?
Den 2012-02-14 05:14, Tyler Johnson skrev:> Several people I work with are objecting to using shorewall-lite on > the > grounds that it requires "PermitRootLogin yes" in the client''s sshd > config.uh :-)> Is there a good way to work around this requirement? I assume sudo is > the answer, but I don''t see much discussion of this.one can let it rsync or even vpn if thats fit better security if shorewall lite could require pgp signed updates, inspiration from clamav 3dr party signatures, or keep it simple with ssh open to trusted ip only, i have seen more script kiddies to pop3 then ssh ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d
Chris Boot
2012-Feb-14 08:33 UTC
Re: load/reload shorewall-lite without root ssh access to client?
On 14/02/2012 04:14, Tyler Johnson wrote:> Several people I work with are objecting to using shorewall-lite on the > grounds that it requires "PermitRootLogin yes" in the client''s sshd config.Use SSH keys instead and use ''PermitRootLogin without-password'' instead?> Is there a good way to work around this requirement? I assume sudo is > the answer, but I don''t see much discussion of this.HTH, Chris -- Chris Boot bootc@bootc.net ------------------------------------------------------------------------------ Keep Your Developer Skills Current with LearnDevNow! The most comprehensive online learning library for Microsoft developers is just $99.99! Visual Studio, SharePoint, SQL - plus HTML5, CSS3, MVC3, Metro Style Apps, more. Free future releases when you subscribe now! http://p.sf.net/sfu/learndevnow-d2d