From owner-cvs-all  Thu Sep 24 16:36:03 1998
Return-Path: <owner-cvs-all>
Received: (from daemon@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id QAA12046
          for cvs-all-outgoing; Thu, 24 Sep 1998 16:36:03 -0700 (PDT)
          (envelope-from owner-cvs-all)
Received: from awfulhak.org (awfulhak.force9.co.uk [195.166.136.63])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id QAA11999
          for <committers@FreeBSD.ORG>; Thu, 24 Sep 1998 16:35:46 -0700 (PDT)
          (envelope-from brian@Awfulhak.org)
Received: from woof.lan.awfulhak.org (root@woof.lan.awfulhak.org [172.16.0.7])
	by awfulhak.org (8.8.8/8.8.8) with ESMTP id AAA25701;
	Fri, 25 Sep 1998 00:35:33 +0100 (BST)
	(envelope-from brian@Awfulhak.org)
Received: from woof.lan.awfulhak.org (brian@localhost [127.0.0.1])
	by woof.lan.awfulhak.org (8.9.1/8.9.1) with ESMTP id AAA23344;
	Fri, 25 Sep 1998 00:35:12 +0100 (BST)
	(envelope-from brian@woof.lan.awfulhak.org)
Message-Id: <199809242335.AAA23344@woof.lan.awfulhak.org>
X-Mailer: exmh version 2.0.2 2/24/98
To: Mark Murray <mark@grondar.za>
cc: Nik Clayton <nik@nothing-going-on.demon.co.uk>, committers@FreeBSD.ORG
Subject: Re: Security and other facilities at WC CDROM - the plan. 
In-reply-to: Your message of "Thu, 24 Sep 1998 20:58:33 +0200."
             <199809241858.UAA24764@gratis.grondar.za> 
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Date: Fri, 25 Sep 1998 00:35:12 +0100
From: Brian Somers <brian@Awfulhak.org>
Sender: owner-cvs-all@FreeBSD.ORG
X-Loop: FreeBSD.org
Precedence: bulk

> > PS: Of course, that 'something fundamental' is probably a good dose of RTFM.
> 
> :-) No - you hit the nail on the head with a large hammer. You just
> need to figure out hou to make ssh log you in "no-password". Hint:
> look at ssh-keygen(1).

There are lots of gotchas that tend to strike afterwards.  The best 
is having a home directory that's group writable (don't).

If you do stuff from libalias'd machines, you must make your host key 
on all machines behind the alias'er the same as the alias'ers and add 
whatever *.freebsd.org sees as being the connecting machine to your 
.shosts file.

> M
> --
> Mark Murray
> Join the anti-SPAM movement: http://www.cauce.org
> 

-- 
Brian <brian@Awfulhak.org>, <brian@FreeBSD.org>, <brian@OpenBSD.org>
      <http://www.Awfulhak.org>
Don't _EVER_ lose your sense of humour....