Today I talked to a sysadmin from my company about securing a (SSH) Server and he brought up an interesting idea:
- He has several test users on that server (john, admin, steve, etc...) with easy passwords (asdf, a, b, qwer,....)
- Each user has limited privileges
- Each user's .bashrc contains a call to a function to immediately block the ip from where this user is connecting
- the second line in the .bashrc is 'exit'
My feeling is that this opens pandora's box, but I can't tell why. What might go wrong with this?