Using Secure SSH Settings
Rationale
If you intend to allow SSH connections to IGEL OS, there are a number of options that can make these more secure.
Instructions
To secure the SSH settings of your devices, make as many of the following settings as possible for your use case
- In IGEL Setup go to System > Remote Access > SSH.
- Deactivate Permit empty passwords.
- Deactivate Permit administrator login.
- Deny User access for
user
, who can execute any command with regular user privileges. - Allow User access for
ruser
, whose access is restricted by the list Applications access for remote user 'ruser'. - Where needed, edit the list Applications access for remote user 'ruser'. It defines the commands that
ruser
can run from remote. By default, a local shell (localshell
) and IGEL Setup (/config/sessions/setup0
) are allowed. - Click Apply.
- Go to Security > Password, under User Account for Remote Access activate Use Password and set a password
- Click Apply.