Subject: Re: PermitRootLogin in SSHd (WAS: Re: Telnet logins)
To: David Brownlee <abs@netbsd.org>
From: Robert Elz <kre@munnari.OZ.AU>
List: port-i386
Date: 08/27/2001 17:50:33
    Date:        Mon, 27 Aug 2001 11:15:23 +0100 (BST)
    From:        David Brownlee <abs@netbsd.org>
    Message-ID:  <Pine.NEB.4.33.0108271101330.16673-100000@odysseus.mono.org>

  | 	Changing the default means an additional file to manually modify
  | 	at the console before any remote configuration can be done.

You also have to enable sshd in rc.conf.

Some time ago, NetBSD changed the default inetd.conf to "everything disabled".
That's unquestionably the best (safest) config to ship - although it probably
isn't the right config for anything at all when it is actually running.

Shipping the world in the safest possible default state is the right thing
to do, then if you need to enable servers, or enable server functions, that
are less safe, at least you know you have done that - it hasn't been done
for you by someone else.

kre