ssh需要怎么设置吗?我现在打开密钥,关闭密码登录,允许root登录(因为觉得用密钥了,就可以打开root登录)。
Protocol 2
AddressFamily inet
Port 9022
LoginGraceTime 60
ChallengeResponseAuthentication no
MaxAuthTries 6
PermitEmptyPasswords no
GSSAPIAuthentication no
GSSAPICleanupCredentials no
UsePAM yes
PrintLastLog no
TCPKeepAlive yes
PidFile /var/run/sshd.pid
Banner none
PermitRootLogin prohibit-password
PubkeyAuthentication yes
StrictModes yes
X11Forwarding yes
X11DisplayOffset 10
X11UseLocalhost no
PrintMotd no
AcceptEnv LANG LC_*
Subsystem sftp /usr/lib/openssh/sftp-server
ClientAliveInterval 180
ClientAliveCountMax 10
GatewayPorts yes
HostKey /etc/ssh/ssh_host_rsa_key
HostKey /etc/ssh/ssh_host_ecdsa_key
HostKey /etc/ssh/ssh_host_ed25519_key
SyslogFacility AUTHPRIV
AuthorizedKeysFile .ssh/authorized_keys
PasswordAuthentication no
XAuthLocation /usr/bin/xauth
# Accept locale-related environment variables
AcceptEnv LANG LC_*
AcceptEnv LANG LC_CTYPE LC_NUMERIC LC_TIME LC_COLLATE LC_MONETARY LC_MESSAGES
AcceptEnv LC_PAPER LC_NAME LC_ADDRESS LC_TELEPHONE LC_MEASUREMENT
AcceptEnv LC_IDENTIFICATION LC_ALL LANGUAGE
AcceptEnv XMODIFIERS
ChallengeResponseAuthentication no
【 在 aosp 的大作中提到: 】
: 没有那么不安全
: 管好ssh
: 其它都是小事
: ...................
--
FROM 223.73.3.*