[FS#123] Root passwordless logins allowed even if there is an SSH public key, and user is not warned of this

LEDE Bugs lede-bugs at lists.infradead.org
Mon Sep 12 04:20:02 PDT 2016


The following task has a new comment added:

FS#123 - Root passwordless logins allowed even if there is an SSH public key, and user is not warned of this
User who did this - Borromini (Borromini)

----------
Hi Vittorio,

I just checked this - I have quite a few devices with remote access enabled - but I'm getting the expected behaviour - access denied (public key):

$ ssh -p 12345 root at whatever.no-ip.net
The authenticity of host '[whatever.no-ip.net]:12345 ([78.xx.xx.xx8]:12345)' can't be established.
RSA key fingerprint is dd:xx:xx:20:eb:xx:xx:xx:xx:xx:a2:5c:81:44:14:f7.
Are you sure you want to continue connecting (yes/no)? yes
Failed to add the host to the list of known hosts (/data/.ssh/known_hosts).
Permission denied (publickey). 
----------

More information can be found at the following URL:
https://bugs.lede-project.org/index.php?do=details&task_id=123#comment403



More information about the lede-bugs mailing list