From owner-FreeBSD-users-jp@jp.freebsd.org  Tue Apr 20 13:05:02 1999
Received: by jaz.jp.freebsd.org (8.9.2+3.1W/8.7.3) id NAA26440;
	Tue, 20 Apr 1999 13:05:02 +0900 (JST)
	(envelope-from owner-FreeBSD-users-jp@jp.FreeBSD.org)
Received: from dnsgw.tmca.ac.jp (dnsgw.tmca.ac.jp [202.209.88.10])
	by jaz.jp.freebsd.org (8.9.2+3.1W/8.7.3) with ESMTP id NAA26376
	for <FreeBSD-users-jp@jp.freebsd.org>; Tue, 20 Apr 1999 13:04:57 +0900 (JST)
	(envelope-from freebsd@tmca.ac.jp)
Received: by dnsgw.tmca.ac.jp (1.39.111.2/3.5Wbeta-dnsgw)
	id AA142191086; Tue, 20 Apr 1999 13:04:46 +0900
Received: from mailsv(192.168.1.13) by dnsgw.tmca.ac.jp via smap (V2.1)
	id xma014210; Tue, 20 Apr 99 13:04:40 +0900
Received: from i386.honkan3.tmca.ac.jp by tmca.ac.jp (1.39.111.2/3.5Wbeta-mailsv)
	id AA198731080; Tue, 20 Apr 1999 13:04:40 +0900
Received: (qmail 16437 invoked by uid 1000); 20 Apr 1999 04:04:39 -0000
Message-Id: <19990420040439.16436.qmail@i386.honkan3.tmca.ac.jp>
From: "Murakami Hiroshi" <freebsd@tmca.ac.jp>
In-Reply-To: <19990420124039Y.takano@crayfish.co.jp> from "TAKANOYuji
 =?ISO-2022-JP?B?GyRAGyRCJD8kKyROJGYhQSQ4GyhC?=" at "Apr 20, 1999 12:40:39
 pm"
To: FreeBSD-users-jp@jp.freebsd.org
Date: Tue, 20 Apr 1999 13:04:39 +0900 (JST)
X-Mailer: ELM [version 2.4ME+ PL43(25)+JP0.43]
Mime-Version: 1.0
Content-Type: text/plain; charset=ISO-2022-JP
Content-Transfer-Encoding: 7bit
Reply-To: FreeBSD-users-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990405
X-Sequence: FreeBSD-users-jp 41436
Subject: [FreeBSD-users-jp 41436] Re: ssh-1.2.26 security
Errors-To: owner-FreeBSD-users-jp@jp.freebsd.org
Sender: owner-FreeBSD-users-jp@jp.freebsd.org
X-Originator: freebsd@tmca.ac.jp

> $@$?$+$N$G$9!#$3$s$K$A$O!#(J
> 
>   $@:4ED$5$s(J $@$,(J SD 5 $@7n9f$K(J ssh $@$N;v$r=q$$$F$$$?MM$J$N$GKM$b=q$$$F$7(J
> $@$^$*$&(J;-)$@!#(J
> 
>   ssh $@$G$O!"(Jroot $@$G$G$b(J login $@=PMh$F$7$^$&$N$G$9$,!"(J/etc/sshd_config 
> $@$N(J "PermitRootLogin no" $@$G2sHr$G$-$^$9!#(J
> 

/etc/sshd_config $@$G!"(J $@G'>Z$K4X$9$k;XDj$+$i(J, PasswordAuthentication $@$r(J
no $@$K$9$k!"Nc$($P(J($@0lHV??$CEv$J@_Dj$G$O(J)

...
RhostsAuthentication no
RSAAuthentication yes
RhostsRSAAuthentication no
PasswordAuthentication no
...
$@$H$7$F$*$1$P!"$$$$$N$G$O$"$j$^$;$s$+(J?
~/.ssh/$@0J2<$N(J identity $@%U%!%$%k$K=q$+$l$?(J
$@%-!<$OAm$"$?$j$G$O$d$V$k$K$OD9$$$G$7$g$&(J.
