Isn't Slackware supposed to ship the upstream default configuration in line with OpenSSH documentation? Do we need this sort of distro-based handholding?

This option is configured the same way in the OpenSSH tarball from their website, so actually this is the upstream default.

I don't see why Pat is bound by anything other than his own judgment in terms of what Slackware ships.

As for OpenSSH upstream, they're not prescriptive:

"The default configuration should be instantly usable, though you should review it
to ensure that it matches your security requirements." [emphasis mine]

--mancha

I don't have a server and just use slackware web-surfing, email, and watching amazon prime and hulu plus videos... I try to disable ssh and anything thing else I can for security purposes. I try to be security conscious without being security paranoid... if that makes any sense...

I do the same

I have similar problem. I found out that there is an executable file .SSH2 in the /etc/ folder. Delete it. It probably cause the creation of another executable file .sshdd1401029612 in the /tmp/ directory that cause all the troubles. I checked it using htop. The file is big. The other files sfewfesfs, sfewfesfshgfhddsfew, sdmfdsfhjfe, gfhjrtfyhuf, dsfrefr, ferwfrre were just probably dummy files.

Note deleting files without listing (volatile) details, investigating how it got there and ensuring it can't happen again is bad.


See https://www.linuxquestions.org/quest...1/#post5167596 and https://www.linuxquestions.org/quest...1/#post5169774