3 ms·
List of all users allowed to use SSH on my systems: - root - user - ansible_conf_daemon_user End of List. It's all containers so IDGAF and I use pubkey auth
by zaarn 8y ago
List of all users allowed to use SSH on my systems:
- root
- user
- ansible_conf_daemon_user
End of List. It's all containers so IDGAF and I use pubkey authentication on each user.
- xorcist 8y agoFor non trivial environments with audit requirements this is not an option. Running all software under the same uid is also usually best avoided, you'll always have data at rest somewhere (which needs to be backed up, access controlled, and so on).
- zaarn 8y agoOf course there is other users but they aren't configured for SSH via AllowUser. Additionally most of those are containers where running it all as the same UID isn't a problem.
- xorcist 8y agoUser ids without login privileges can be just as interesting to enumerate. Containerization isn't really relevant to protecting data, as you'd normally find data volumes and backups attached.
- zaarn 8y agoWell, it would but the exposed containers don't have any non-default users. Plus, this is LXC, not Docker. There is no data volumes or backups attached. Backups are shipped to an append only server via SSH tunnel with low privileges, which also doesn't have nonstandard users setup.