Gentoo Archives: gentoo-user

From: Walter Dnes <waltdnes@××××××××.org>
To: gentoo-user@l.g.o
Subject: Re: [gentoo-user] OpenSSH upgrade warning
Date: Wed, 11 Nov 2015 04:52:19
Message-Id: 20151111045157.GA11729@waltdnes.org
In Reply to: [gentoo-user] OpenSSH upgrade warning by Michael Orlitzky
1 On Mon, Nov 09, 2015 at 08:38:20PM -0500, Michael Orlitzky wrote
2 > A major upgrade to OpenSSH is being stabilized:
3 >
4 > https://bugs.gentoo.org/show_bug.cgi?id=555518
5 >
6 > The default of PermitRootLogin for sshd in the new version is
7 > "prohibit-password". If you typically log in to the root account over
8 > SSH using a password, **IT'S GONNA BREAK**, and you won't be able to fix
9 > it remotely unless you have an account that can sudo to root.
10 >
11 > To maintain the current behavior, set PermitRootLogin to "yes" before
12 > you upgrade, and then be careful not to wipe out sshd_config.
13
14 Thanks for the info. I'd doing an install on a machine at home, and I
15 ran into that. Since I hadn't yet created a local user, there was
16 nowhere to sudo from. Fortunately, it's all in one room, and a few
17 clicks of the KVM remote-switcher brought me to the actual machine,
18 where I could log in directly. I now have my key on the installed
19 machine and can ssh in from my current machine.
20
21 --
22 Walter Dnes <waltdnes@××××××××.org>
23 I don't run "desktop environments"; I run useful applications