Reputation
2,993
Top tag
Next privilege 3,000 Rep.
Cast close & reopen votes
Badges
13 29
Newest
 Nice Answer
Impact
~225k people reached

Jun
26
comment Set up sftp to use password but ssh not to use password
This isn't well documented, but only one Match directive will be used; you should put the most specific directive on top. If you list sftp first, a user who is in both groups will be allowed PasswordAuthentication.
Jun
26
comment Set up sftp to use password but ssh not to use password
@dar OK; different accounts then. If they were the same account, someone knowing the sftp password could overwrite some profile file (.ssh/rc, .profile, .bashrc…) and get the same privileges as someone knowing the private key.
Jun
25
answered Set up sftp to use password but ssh not to use password
Jun
25
answered Ubuntu, how to setup a new machine like an existing one
Jun
25
revised Debian preseed late_command is not executed
added 170 characters in body; added 77 characters in body
Jun
25
answered Debian preseed late_command is not executed
Jun
25
answered exim: remote host is local host?
Jun
25
comment How to find the number of open ports in linux?
Also include --inet6 (short for both: -4 -6), to get IPv6 sockets and ip-agnostic sockets (the latter being the default on dual stack hosts, see rfc 3493 section 3.7).
Jun
24
comment How to use rsnapshot without remote root?
I don't know of a backup tool that uses privilege separation, sadly. However, since you care about security, consider a tool that does encrypted back-ups; Duplicity is one.
Jun
24
revised iptables rule setup
edited tags
Jun
24
answered Will a standard NAT-router firewall stop outgoing traffic?
Jun
23
answered Python script not running on ready made django vmware image
Jun
21
revised Networked filesystem with user level security for linux
added 903 characters in body; deleted 4 characters in body
Jun
17
revised Windows Firewall problem GP0 SP3
edited tags
Jun
17
comment Where is all the memory being consumed?
Try a <pre> tag.
Jun
16
comment /etc/hosts file for a multi-homed, multi-domain machine?
You don't have DNS on the lan, but do you have a dhcp server? If you haven't yet, dnsmasq is a good fit. Otherwise, avahi-autoipd, or host files.
Jun
16
comment ubuntu server slowly filling up
sudo du -xb / --max-depth 3 |sort -n ?
Jun
16
revised ubuntu server slowly filling up
added 26 characters in body
Jun
16
answered ubuntu server slowly filling up
Jun
16
answered Networked filesystem with user level security for linux