[OpenWrt-Devel] [LEDE-DEV] [PATCH v1 1/1] openssh: disable passwords for openssh server

[Sami Olmari]

Just enthusiast users 2 cents..

I'm also in favour of staying/keep using passwordless login as default
behaviour, even for openssh. We can not stop _all_ of the bad things a
user _might_ do... As per default OpenWrt also doesn't allow much
anything from WAN side etc to keep that covered too... More involved
user can still do whatever they wish with their OpenWrt installations
or compiletime or so on...

-- 
 Sami Olmari

On Sat, Feb 17, 2018 at 3:53 PM, Karl Palsson <karlp at tweak.net.au> wrote:
>
> Philip Prindeville <philipp at redfish-solutions.com> wrote:
>>
>>
>> In a perfect world, no one should ever have to build with
>> patches, anything in files/, cherry-picked commits, etc.
>> Everything would be expressed in the .config (or
>> kernel-config).
>
> I think this is probably the root of all the discussion. I agree
> with you that most people shouldn't want patches, but I think
> it's rather silly to say that it should all be via .config.
> Putting things in files/ is vastly easier and more flexible than
> trying to create something for everyone in makefile and kconfig
> syntax!
>
> I'd generally rather see a lot _less_ of things created via an
> ever expanding .config and _more_ local customizations applied as
> local customizations :)
>
> Cheers,
> Karl Palsson
>
>
> _______________________________________________
> openwrt-devel mailing list
> openwrt-devel at lists.openwrt.org
> https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel
>