看板FB_security
标 题Re: misc/187307: Security vulnerability with FreeBSD Jail
发信站NCTU CS FreeBSD Server (Thu Mar 6 02:43:27 2014)
转信站ptt!csnews.cs.nctu!news.cednctu!FreeBSD.cs.nctu!.POSTED!freebsd.org!ow
On Wed, Mar 5, 2014 at 5:39 PM, Xin Li <
[email protected]> wrote:
> So the solution would be to change your configuration such that:
>
:
> 2) Do not make host's sshd to listen on all addresses, instead, only
> listen to the designated host IP address. This is not a security
> measure but avoids confusion.
>
You will want to change the hosts sshd_config to only listen on the
10.0.0.100 address:
ListenAddress 10.0.0.100
If the host needs to listen on multiple addresses, just add another
ListenAddress.
http://www.cyberciti.biz/tips/howto-openssh-sshd-listen-multiple-ip-address.html
--
DISCLAIMER:
No electrons were maimed while sending this message. Only slightly bruised.
_______________________________________________
[email protected] mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-security
To unsubscribe, send any mail to "
[email protected]"