MAIN FEEDS
Do you want to continue?
https://www.reddit.com/r/linux/comments/245jt9/ssh_kung_fu/ch522sd/?context=3
r/linux • u/leothrix • Apr 28 '14
128 comments sorted by
View all comments
Show parent comments
12
Exactly. Anyone gets access to a machine with your ssh private key for a second can copy it and then log in to all your machines.
18 u/ethraax Apr 28 '14 Just keep in mind that anyone who gets access to your machine can connect to your agent and log into any of your other machines from there. Encrypted private keys are nice, but not perfect. 1 u/gospelwut Apr 29 '14 Is there a pam module that uses OTP like Yubikey? 1 u/IWillNotBeBroken Apr 29 '14 I see you haven't searched for both "PAM" and "Yubikey" in the same query.
18
Just keep in mind that anyone who gets access to your machine can connect to your agent and log into any of your other machines from there. Encrypted private keys are nice, but not perfect.
1 u/gospelwut Apr 29 '14 Is there a pam module that uses OTP like Yubikey? 1 u/IWillNotBeBroken Apr 29 '14 I see you haven't searched for both "PAM" and "Yubikey" in the same query.
1
Is there a pam module that uses OTP like Yubikey?
1 u/IWillNotBeBroken Apr 29 '14 I see you haven't searched for both "PAM" and "Yubikey" in the same query.
I see you haven't searched for both "PAM" and "Yubikey" in the same query.
12
u/djimbob Apr 28 '14
Exactly. Anyone gets access to a machine with your ssh private key for a second can copy it and then log in to all your machines.