Faulty way of spawning sshd in single-user mode (page 299)More...
Reported on: 2006-10-22
In chapter 6. Debian system administration on page 299:
In chapter 6.3.1, I suggest to add sshd to the /etc/inittab file to be able to login to a remote system even in single-user mode:
# sed -i -e "/^~~/ish:S:respawn:sshd -Do 'AllowUsers=root'" /etc/inittab
Unfortunately, there are two errors with this: first, sshd must be called with the complete path (to guard against trojans), and init must be told to reload the configuration file after the change.
The following corrects both problems:
# sed -i -e "/^~~/ish:S:respawn:/usr/sbin/sshd -Do 'AllowUsers=root'" /etc/inittab
# telinit q