LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices

Reply
 
Search this Thread
Old 01-29-2005, 10:47 AM   #1
BajaNick
Senior Member
 
Registered: Jul 2003
Location: So. Cal.
Distribution: Slack 11
Posts: 1,737

Rep: Reputation: 46
Do I need these if Im not running a server?


Do I need Apache, PHP, and ProFTd If I am not runninga server? I Just have a single user desktop system,
Also I ran rkhunter and it says " Warning ssh v1 root login possible " I tried to upgrade but I still get the same message. I thought there was a config file to modify but I cant remember how I did it last time. Can someone point me in the right direction? I am not using that system until that is fixed and I have changed the passwords several times.
And I dont use any kind of or need remote login at all.
Thanks.

Last edited by BajaNick; 01-29-2005 at 11:05 AM.
 
Old 01-29-2005, 11:13 AM   #2
makuyl
Senior Member
 
Registered: Dec 2004
Location: Helsinki
Distribution: Debian Sid
Posts: 1,107

Rep: Reputation: 53
In /etc/sshd_config or /etc/ssh/sshd_config change the following line under # Authentication:
PermitRootLogin no (you probably have yes here)

You can also set the protocol to 2 with this line:
Protocol 2

You shouldn't need apache, or httpd as the new version is called, nor any ftp servers unless you plan on setting them up.
sftp is different since it's used by ssh.

BTW, if you don't want ssh to listen at all make sure it's not started on bootup. If it's not running, I suppose it doesn't really matter if root could login or not. But you can remove the option anyway.
 
Old 01-29-2005, 11:43 AM   #3
BajaNick
Senior Member
 
Registered: Jul 2003
Location: So. Cal.
Distribution: Slack 11
Posts: 1,737

Original Poster
Rep: Reputation: 46
Thanks, I am trying to install ssh2 but I dont know if its worth it since I am not doing any kind of remote login. Should I install it anyway for some other kind of security?

Last edited by BajaNick; 01-29-2005 at 12:12 PM.
 
Old 01-29-2005, 12:59 PM   #4
makuyl
Senior Member
 
Registered: Dec 2004
Location: Helsinki
Distribution: Debian Sid
Posts: 1,107

Rep: Reputation: 53
If you're not going to run the ssh service there's no point in updating it. Sorry if I was unclear earlier. Just make sure it's not started in the runlevels /etc/rc*
 
Old 01-29-2005, 02:33 PM   #5
BajaNick
Senior Member
 
Registered: Jul 2003
Location: So. Cal.
Distribution: Slack 11
Posts: 1,737

Original Poster
Rep: Reputation: 46
Thanks
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Are you running a server? fuelinjection Linux - General 14 05-14-2006 05:32 PM
Running a server jake3988 *BSD 4 04-26-2005 06:42 PM
Please help me get X Server running!!! civics123 Linux - Newbie 2 11-08-2004 12:09 PM
Please help me get X Server running!!! civics123 Debian 2 11-08-2004 09:43 AM
so is a web server running Linux without X 4x faster than win2k server? Mr. Mojo Risin General 3 09-02-2003 07:41 PM


All times are GMT -5. The time now is 08:01 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration