News for hackers. Stuff that matters.

A comment on How to secure your new VPS: a step-by-step guide.

Re:How to secure your new VPS: a step-by-step guide by kelnos on Monday October 21, 2024 @10:12PM (#41910509)
I would have appreciated the rationale behind setting 'UsePAM' to 'no'. I assume it's because, with password auth disabled, it's not necessary, and better to disable something that you don't need that would otherwise add to the attack surface?
[ Parent | on HN ]
Re:How to secure your new VPS: a step-by-step guide by LinuxBender on Tuesday October 22, 2024 @12:26PM (#41915935)
They are probably just trying to avoid PAM mistakes which are common when people hand edit pam modules.

For completeness sake if someone is using SELinux Enforcing mode then UsePam will likely need to be Yes to avoid breaking sshd mandatory access rules.

[ Parent | on HN ]