[LEDE-DEV] [PATCH] dropbear: limit max auth tries from 10 to 3

Kevin Darbyshire-Bryant kevin at darbyshire-bryant.me.uk
Sat May 27 11:23:50 PDT 2017



On 27/05/17 18:22, Florian Fainelli wrote:
> 
> 
> On 05/27/2017 04:11 AM, Kevin Darbyshire-Bryant wrote:
>> 10 attempts at login before dropping connection is too many, 3 tries and
>> you're out.
> 
> This sounds like something we may want to be configured via UCI instead
> of at built time. The default value you suggest is sensible though.

Hi Florian,

That's possible with a more extensive patch to introduce MAX_AUTH as a
command line option, currently it's only configurable at build time.

I can take a look at doing so, however I'd be concerned that if upstream
didn't take the patch it would be another LEDE patch to maintain.

Cheers,

Kevin



More information about the Lede-dev mailing list