3 ms·
fwknop is a bit lower risk though. If all an attacker can do is open a port, they’ll still have to exploit OpenSSH.
by notpushkin 2mo ago
fwknop is a bit lower risk though. If all an attacker can do is open a port, they’ll still have to exploit OpenSSH.
- akshayrajeshwar 2mo agofwknop's default is to run as root, so there's that. Support for separation of privileges is still pending since 2013 (https://github.com/mrash/fwknop/issues/32 https://github.com/mrash/fwknop/issues/32)
- notpushkin 2mo agoGood point, thanks.