People also assume all defaults are “safe”, and that the out of the box configuration does not need to be reviewed.
For example, I just installed Fedora Ashai Linux last night and discovered that the sshd daemon is listening on port 22 by default. Not sure if there was an easy to guess password for that, but it was not mentioned at all in the installer and could have been a big problem if I had not caught it.
discovered that the sshd daemon is listening on port 22 by default
Your comment confused me and I had to read it more than once. I’d expect the SSH service to default to listening on the default port and I’d be annoyed if a distribution had configured the sshd daemon to default to listening to a port other than 22.
I’m guessing that your main problem with the distribution is that the SSH service was automatically enabled in the first place (without your knowledge).
Comments
People also assume all defaults are “safe”, and that the out of the box configuration does not need to be reviewed.
For example, I just installed Fedora Ashai Linux last night and discovered that the sshd daemon is listening on port 22 by default. Not sure if there was an easy to guess password for that, but it was not mentioned at all in the installer and could have been a big problem if I had not caught it.
Your comment confused me and I had to read it more than once. I’d expect the SSH service to default to listening on the default port and I’d be annoyed if a distribution had configured the sshd daemon to default to listening to a port other than 22.
I’m guessing that your main problem with the distribution is that the SSH service was automatically enabled in the first place (without your knowledge).
Yes, sorry you are right. My main gripe is that the sshd service was enabled and running by default.