Inicio » Trisquel » Incidencias
Enviado por Mzee o Mér, 02/26/2014 - 11:48

Do NOT Install SSH Server by Default when Selecting Trisquel Desktop Environment Software Package

Proxecto:Trisquel
Versión:6.0
Componente:Programs
Categoría:solicitude de mellora
Prioridade:normal
Asignado:Sen asignar
Estado:closed
Descrición

Right now, the ssh server is enabled by default. Please disable it by default. Thank you very much.

A discussion including many arguments can be found here:
https://trisquel.info/en/forum/ssh-server-enabled-default

antiesnob:
Mér, 02/26/2014 - 13:19
Prioridade:critical» minor
Estado:active» needs more info

Changed to minor because disabling it would interfere with free software community and Trisquel objectives. Status changed to needs more info because I'm writing a text to add to the discussion as I mentioned in one of the posts I made on the link cited by Mzee but there was no one that wanted to wait for it and listen something that were not selfish and lacking of vision.
No offense taken by me; no offense taken by any one I expect...

Mzee:
Mér, 02/26/2014 - 13:27
Prioridade:minor» normal

Ok, I can wait for your response. However, I do not agree with the "minor" status as this does effect all users. I'm setting it to "normal".

antiesnob:
Mér, 02/26/2014 - 13:58

OK.

lembas:
Xov, 02/27/2014 - 07:42
Estado:needs more info» active
MrMaui76:
Xov, 03/06/2014 - 18:18
Título:Disable ssh server by default» Do NOT Install SSH Server by Default when Selecting Trisquel Desktop Environment Software Package

To be VERY specific...

Installing Trisquel 6.0 desktop environment, selecting ONLY the "Trisquel Desktop Environment" installation package, and NOT selecting the "SSH Server" installation package, the SSH server package is STILL installed and the user is NOT notified that such a condition exists. In the end you end up with a DESKTOP computer that has an SSH server listening on all interfaces that a user is unaware of.

I changed the title of this issue to reflect something more specific so that the intent is clear. I hope that this is OK.

Mzee:
Mar, 03/18/2014 - 18:26

Thank you, Mr. Maui.
And this is why this issue is very urgent:
http://thehackernews.com/2014/03/operation-windigo-linux-malware.html

quidam:
Mar, 03/18/2014 - 21:43
Estado:active» fixed

Change done in http://devel.trisquel.info/gitweb/?p=trisquel-packages.git;a=commitdiff;h=b52137fe30c9b7be460d9df2bff419cfe3912697

Mzee:
Mér, 03/19/2014 - 10:22

Thank you!

quidam:
Mér, 04/02/2014 - 10:25
Estado:fixed» closed

Automatically closed -- issue fixed for 2 weeks with no activity.