3 ms·
This is correct. The tip about disabling SSH isn't about security, it's just about quickly highlighting areas where you're not automated. When developing an ap
by richadams 13y ago
This is correct. The tip about disabling SSH isn't about security, it's just about quickly highlighting areas where you're not automated.
When developing an application for example, it's often necessary to SSH in to play with some things. But once you've ready to go to production, you want as much automation as possible. Forcing yourself to not use SSH will quickly show you where you aren't automated.
- freerobby 13y agoThanks. I'm a fan of automation but respectfully disagree with this (see my response above for details).
- richadams 13y agoPerfectly valid. This particular tip certainly seems to have caused some great discussion! It worked for my particular case, but I can definitely see it not working for everyone. I've added a link to this thread to my tip, and expanded on it a little to warn people that it's not for everyone.
- freerobby 13y agoThanks for the reply here and above! Good discussion indeed.
- durzagott 13y agoWhat if my automation tool uses SSH (ie, Ansible)?
- richadams 13y agoSomeone else pointed this out too. The goal of the tip is really to stop users SSHing in just to fix that one little thing, so you could still allow your automation frameworks SSH access and just disable it for users (the idea is to disable in firewall, not turning off SSH on your server, that way you can still use it for emergencies). The idea worked well for me, but obviously isn't for everyone, YMMV.