Notices

Originally Posted by chill

If I may go back to the subject again...In Reverse SSH, changing a field other than the server password will cause all the settings, including the password in plain text, to be written to the log file.

So deleting the log file will not help if you subsequently change e.g. the port number; the username and password will be recorded in the (fresh) log file.

Just thought I'd warn the users.

Originally Posted by chill

Well, my sshd does not run when the N900 boots up. I have the SSH menu applet installed and sshd is not up after the N900 finishes booting. However, I have an older version of the applet (0.1.9). So I guess the old version was successful in making ssh not start at boot on my N900. I was fine with it not starting until I began using SMSCON.

I don't see a way of having sshd start on my N900 with the v0.1.9 of the applet installed, so I guess I will upgrade to the latest version now (I was holding back after seeing some issues posted in the applet's thread).

Originally Posted by chill

Yes, sir, that applet.

I understand that the log can/should be deleted after updating the settings. I just wanted to say that the "update granularity" is per screen: if you update just one field on the screen, all of the settings from that screen get written to the log. At least that's true for the Reverse SSH settings. One might assume otherwise, ie. that updating the port number only does not cause the username/password to be written to the log, but that's not the case. This then implies that the log should be deleted after any change to any of the fields (in Reverse SSHat least).

Originally Posted by Saturn

Maybe you didn't realize this but the applet's main purpose is to augment security by keeping switched off the ssh daemon and only enable it when the user demands it. So, two solutions come to my mind. Either to remove the applet and choose a good password or create an sms command to start the sshd when you need to initiate the reverse-ssh connection.

On your second point, i can confirm that any change triggers update of all the settings and they are written in the log. I remind again, the log is only accessible by root. If anyone cares about their passwords etc. becoming root should be only possible with a password.

Hope it is clear.

Originally Posted by chill

There may be methods to have the N900 ask for user password when gaining root, but I haven't looked into that enough, and it might be inconvenient to be asked for a password every time root access is needed.

Originally Posted by sixwheeledbeast

As long as applications are designed correctly (creating there own sudoers file) asking for password to gain root will cause no issues. You will only need to input the password to root in terminal.