More hits than I was expecting! Ok, here we go.
1. Don't install sudo. Instead, set sshd to allow root logins via key only ("PermitRootLogin prohibit-password"). This makes privilege escalation significantly harder.
Zack Weinberg
npub10u…hq50j
2025-08-29 17:07:15 UTC
in reply to nevent1q…qle0
Author Public Key
npub10u5ldr5qv22nnlc56pg25allladfwyxxpyxewu5vc9np3m7kz5jqehq50jSeen on
wss://relay.momostr.pinkPublished at
2025-08-29 17:07:15 UTCEvent JSON
{
"id": "0a808e216be29a1381530a8a74150d5d5fce08fe115daaaaeaaee1d775855dc8",
"pubkey": "7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524",
"created_at": 1756487235,
"kind": 1,
"tags": [
[
"proxy",
"https://masto.hackers.town/@zwol/115113147497607021",
"web"
],
[
"p",
"7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524"
],
[
"e",
"6627d3f74203983bbe4184bab1b96c73688c81116cf07f1f86d5083dc3fa924a",
"",
"root",
"7f29f68e80629539ff14d050aa77ffff5a9710c6090d97728cc16618efd61524"
],
[
"proxy",
"https://masto.hackers.town/users/zwol/statuses/115113147497607021",
"activitypub"
],
[
"L",
"pink.momostr"
],
[
"l",
"pink.momostr.activitypub:https://masto.hackers.town/users/zwol/statuses/115113147497607021",
"pink.momostr"
],
[
"-"
]
],
"content": "More hits than I was expecting! Ok, here we go.\n\n1. Don't install sudo. Instead, set sshd to allow root logins via key only (\"PermitRootLogin prohibit-password\"). This makes privilege escalation significantly harder.",
"sig": "968ba1a82caccd169b2a27e74c442b56feb632f604289c20ae4b687f7bcce223685901300b78475848c768e0617e47712b21f779ea62f844446cbf1a675cfda3"
}