3 ms·
Of course there is other users but they aren't configured for SSH via AllowUser. Additionally most of those are containers where running it all as the same UID
by zaarn 8y ago
Of course there is other users but they aren't configured for SSH via AllowUser.
Additionally most of those are containers where running it all as the same UID isn't a problem.
- xorcist 8y agoUser ids without login privileges can be just as interesting to enumerate. Containerization isn't really relevant to protecting data, as you'd normally find data volumes and backups attached.
- zaarn 8y agoWell, it would but the exposed containers don't have any non-default users. Plus, this is LXC, not Docker. There is no data volumes or backups attached. Backups are shipped to an append only server via SSH tunnel with low privileges, which also doesn't have nonstandard users setup.