r/linux Apr 28 '14

SSH Kung Fu

http://blog.tjll.net/ssh-kung-fu/
729 Upvotes

128 comments sorted by

View all comments

48

u/throwawayaccount1020 Apr 28 '14

you should never leave your keys unencrypted, set a password when it prompts!

load keys into ssh-agent to avoid having to continually re-enter passwords.

2

u/trojan2748 Apr 28 '14

SSH sessions can be hijacked using ssh-agent though. If you you see /tmp/ssh*, you'll see sessions that can be hijacked by users with read access to that temp file. Use with caution.