-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 01/31/2010 03:27 PM, Dan McGee wrote:
As far as pushing goes, that is a bad idea for a number of reasons, the primary being one compromised root server gains you ssh access to X more servers. Can be solved easily by using forced commands: http://oreilly.com/catalog/sshtdg/chapter/ch08.html#22858
- -- Florian Pritz -- {flo,bluewind}@server-speed.net -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.14 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/ iQIcBAEBAgAGBQJLZZSjAAoJEG0WVcFM4cE+5cAP/iKrzKsc30sqGOJDqZdJdrCY xXH0FWP4BqakEdROYiQ9nlAynhQwdovVqtQ70dKnMdV3bxamgWugAraQuFY3bwGU xPDNdGoRxviOL7csSUkTA1oEzDdgj0fxCOxLbIAdRMDXSwEzc+LM2n1/uYiC9tWx KPUfAn5xqNL9egzsl8FDIFxswA3JhZe8i1qVL8pbZphgoV0bhzjVLuB24AGm/10n tBTI0QBoIFFjwfPF8o4X57sK34qVm2laAXmrkSksDF6D7u5XJxD6JJsZsotJBQ/d RehniBEC0v3QrRgQnkrVwKv4aK/34rbqnJ/eBJW6/uPc9aaL+6zYb38LDVm3Dj8U Gfowh/sUoIyua/hkbE8d0Hc2R9ArY0RYXKxQSOYUu9qPLiC4h1hTuHlNaXXakCmb v8jZumno3I/mSm2br4PBNQGWd42DK/B+HcduycvIImSeY1EVigbskNrTfGlmaSJt qapDzFEOTxHhbchJv58szAook1mWxZe+zimmh7Kpmp0qw5ebg6dS6T2nzJ+kPRo7 OyoH7lK2xZnc7dfLVHjLFSffhcl1wxjHjdhkz4Lz8ZrbC0rP7vb6a95M1XPsYsrq dG/fJ0CTtFHlgbGCoP6xziMarVmWdt0HiPFoPfgtol5ZaN6AnqsEjaJhi32OoAG2 Sh62vOa0R5Th+i/Cb4VQ =SP5k -----END PGP SIGNATURE-----