3 ms·Again if he can remove ssh running as root on port 1xxxx, he can run his ssh-alike on port 22.by Volundr 13y agoAgain if he can remove ssh running as root on port 1xxxx, he can run his ssh-alike on port 22.theboss 13y agobut he can do 1xxx from an unprivileged NOT ROOT and he requires root to do that with port 22, againVolundr 13y agoSo basically, he's gained root once to kill ssh running as root, but you think that gaining root again in order to run something on port 22 is what's going to stop him?