#44808 - Default to allowing password authentication on leaves users vulnerable

Package	Source(s)		Maintainer(s)
guix		PTS Buildd Popcon

Message #85 received at 44808@debbugs.gnu.org (full text, mbox, reply):

Received: (at 44808) by debbugs.gnu.org; 11 Feb 2021 07:47:08 +0000
From debbugs-submit-bounces@debbugs.gnu.org Thu Feb 11 02:47:08 2021
Received: from localhost ([127.0.0.1]:57643 helo=debbugs.gnu.org)
	by debbugs.gnu.org with esmtp (Exim 4.84_2)
	(envelope-from <debbugs-submit-bounces@debbugs.gnu.org>)
	id 1lA6gu-0001Wl-2Y
	for submit@debbugs.gnu.org; Thu, 11 Feb 2021 02:47:08 -0500
Received: from mail-40132.protonmail.ch ([185.70.40.132]:11370)
 by debbugs.gnu.org with esmtp (Exim 4.84_2)
 (envelope-from <raid5atemyhomework@protonmail.com>)
 id 1lA6gr-0001WD-48
 for 44808@debbugs.gnu.org; Thu, 11 Feb 2021 02:47:06 -0500
Date: Thu, 11 Feb 2021 07:46:51 +0000
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=protonmail.com;
 s=protonmail; t=1613029618;
 bh=kC6ufWjXNKXgrRlBFS5fhmcviLa8FZ/wJFIps/jOZbI=;
 h=Date:To:From:Reply-To:Subject:From;
 b=qjXytzPjL0rkEnm8tjA+n7Z6fMhgDHZVSAGqkHBH2SG15CEkLsz6aFnx+nRrQU43V
 GEBz3LPRRz5GxkagR5A7ZKX+qgusZrr9kvVj6VVeCeIRX8/Um8Cw5vGlb2P+h3sTE5
 V4Ph9LKi0sPUHwK6ZI1YKY3mduL0Lt1dmWa3gpxI=
To: "44808@debbugs.gnu.org" <44808@debbugs.gnu.org>
From: raid5atemyhomework <raid5atemyhomework@protonmail.com>
Subject: Re: Default to allowing password authentication on leaves users
 vulnerable
Message-ID: <K_X9HqOU5KF89CVy-1kOJsxdnvm7QeBDtaYfHhbLhdlHUd4c-ZyvjgDKhTIb7gcYH2-On0ritgjJiZvnZ-QttsFMM9zaPwpKPjNyeKEcdUw=@protonmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: quoted-printable
X-Spam-Status: No, score=-1.2 required=10.0 tests=ALL_TRUSTED,DKIM_SIGNED,
 DKIM_VALID,DKIM_VALID_AU,DKIM_VALID_EF,FREEMAIL_FROM shortcircuit=no
 autolearn=disabled version=3.4.4
X-Spam-Checker-Version: SpamAssassin 3.4.4 (2020-01-24) on
 mailout.protonmail.ch
X-Spam-Score: -0.7 (/)
X-Debbugs-Envelope-To: 44808
X-BeenThere: debbugs-submit@debbugs.gnu.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: <debbugs-submit.debbugs.gnu.org>
List-Unsubscribe: <https://debbugs.gnu.org/cgi-bin/mailman/options/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=unsubscribe>
List-Archive: <https://debbugs.gnu.org/cgi-bin/mailman/private/debbugs-submit/>
List-Post: <mailto:debbugs-submit@debbugs.gnu.org>
List-Help: <mailto:debbugs-submit-request@debbugs.gnu.org?subject=help>
List-Subscribe: <https://debbugs.gnu.org/cgi-bin/mailman/listinfo/debbugs-submit>, 
 <mailto:debbugs-submit-request@debbugs.gnu.org?subject=subscribe>
Reply-To: raid5atemyhomework <raid5atemyhomework@protonmail.com>
Errors-To: debbugs-submit-bounces@debbugs.gnu.org
Sender: "Debbugs-submit" <debbugs-submit-bounces@debbugs.gnu.org>
X-Spam-Score: -1.7 (-)

Hi guix users,

It strikes me that a better course of action here would be, rather than providing a warning that might not be noticed by the user, to remove the default and force people to explicitly put `password-authentication? #t` or `password-authentication? #f`.

That way if I have set up a headless server (possibly having a temporary keyboard/mouse/monitor during initial install, then forever logging in afterwards over intranet using my super secret password "raid5isnotagooddog"), with an existing `configuration.scm` that does not explicitly give the setting, I cannot accidentally lose access to my headless server by doing a random `guix pull && sudo guix system reconfigure configuration.scm` without noticing the warning.

Especially since there exists an `unattended-upgrades-service-type` which automates this `guix pull && sudo guix system reconfigure configuration.scm`, which makes changing this default ***VERY DANGEROUS*** in this use-case.  I'd rather I noticeably error out in this case.

Then later after a year give a "sane" default, after people who have depended on the existing `password-authentication? #t` have already  explicitly put the setting in their `configuration.scm`.

Thanks
raid5atemyhomework

Display info messages

Send a report that this bug log contains spam.

debbugs.gnu.org maintainers <help-debbugs@gnu.org>. Last modified: Sun Dec 22 02:27:53 2024; Machine Name: wallace-server

GNU bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

#44808 Default to allowing password authentication on leaves users vulnerable