On 11/21/2014 09:04 AM, P J P wrote:
> My point is that once we address this (most likely through some
> configuration generation during VM setup), we can also switch
> PermitRootLogin on.
You mean off? Or that we disable it by default and enable it while
setting up a new VM?
The latter. We have to install authorized_keys inside the VM anyway, so
we can touch sshd_config, too.
Florian Weimer / Red Hat Product Security