Hot answers tagged

3

With the default docker engine, it's all or nothing per user. Any user with access to docker on a host effectively has root access on that host (they can start a docker container with a host volume mounted to / and change anything they wish). User access is controlled by either group permissions (the docker group) for unix sockets and the fd that uses ...


1

It looks like you are running a newer OpenSSH client (OpenSSH 7.2p2) against an older OpenSSH server (OpenSSH 6.6.1p1). In the OpenSSH 7.1p2 release notes, it mentions: ssh(1), sshd(8): increase the minimum modulus size supported for diffie-hellman-group-exchange to 2048 bits. From the error message reported, it looks like it is your client ...


1

ssh isn't allocating a tty. Add -t to the ssh command.


1

Key-based authentication with tied-down keys (ie, keys restricted by the IP range they can be used from and/or the command they can be used to invoke) is a pretty safe way of being able to use SSH-based resources from scripts. If you go fully 2FA on sshd, you lose the ability to have automated tasks access resources without operator intervention.


1

You need to decide if you want to do 2FA on your own of if you want to trust an external entity. This is not only to not trust authy but to not trust any attacker, who might intercept the authentication request. Each time you want to login via SSH an HTTP API Request is sent to authy.com. Authy decides if access is granted or not. There are other hosted ...



Only top voted, non community-wiki answers of a minimum length are eligible