secure ssh set up on edubuntu

[Corey Burger]

On 9/30/06, Gavin McCullagh <gmccullagh at gmail.com> wrote:
> Hi,
>
> I'm quite certain this is too late for edgy, but it might be worth looking
> at afterward.
>
> Executive summary:  In order to ease security of ssh, could Edubuntu by
> default set up two sshd instances, one dedicated to LTSP running on tcp
> port 10022 (or whatever) with its own init script "ltsp-ssh" and another
> optional one running on port 22 "ssh".  These should have separate config
> files (ltsp-sshd_config, sshd_config), allowing them to be given different
> authentication rules, etc.  LTSP requires a very open sshd setup which is
> not very suitable for exposing to the net.

<snip>

Gavin,

This certainly looks interesting. Can you create a spec and propose it
for the next developer summit? Your writeup looks fairly complete,
from a casual glance.

Corey