Files
felhom.eu/documentation/audits/night-2026-10-22/P2-D4/01-ssh-proof.txt
T

13 lines
563 B
Plaintext

== BEFORE: root password over SSH from the LAN: root
DooPlex public key added
content check (sshd -t -f the snippet): rc=0
sshd -t (whole): ok
reload ssh: ok
permitrootlogin without-password
passwordauthentication yes
active
== AFTER: root password over SSH from the LAN: Permission denied, please try again.
== AFTER: root KEY over SSH from the LAN: root
== AFTER: the web page's password login (PVE /api2/json/access/ticket): HTTP 200
console (tty1) login as root with the password AFTER the drop-in: shell, `id` → uid=0(root) — 02-console-login-after.png