News for hackers. Stuff that matters.
Re:First Look: macOS Monterey Public Beta by GekkePrutser on Friday July 02, 2021 @05:54AM (#27709655)
Eactly, I'm moving much more towards FreeBSD now because Apple is taking so much away from us power users. Its jails (and the ports collection) are amazing.

For one thing: I always require certificate logins on SSH. On Mac I used to simply change /etc/ssh/sshd_config to this effect, but since Catalina macOS reverts this with every update. Clearly they don't want me poking around in there :(

IMO if you offer SSH you should offer certificate-only access as well, either with a glitzy on/off button or with a config file change, whatever. But nope...

With Apple you get a lot of security for 'free', however you give up a lot of customisation in return, even in terms of security features.

Re:First Look: macOS Monterey Public Beta by asah on Friday July 02, 2021 @06:04AM (#27709702)
dumb q: can you change the path to this file?
Re:First Look: macOS Monterey Public Beta by GekkePrutser on Friday July 02, 2021 @06:45AM (#27709915)
Not really as sshd is compiled to look for it there.

You can override it with a commandline flag but that would mean changing the launchdaemon which is protected by SIP as far as I know. But I will have a look for that to doublecheck.