Disable SSH daemon when remote connections are disabled
Current implementation of disabling Remote connection in developer mode just disables login of nemo user but it doesn't completely disable the SSH daemon. I don't mind about the SSH listening on USB connection but I don't like the idea of having SSH daemon listening on the WiFi connection when connected to untrusted WiFi. Not that it's high-risk but it's another way how the security in the phone could be possibly exploited.
How to reproduce:
- Go to Settings -> System settings -> Developer mode and enable it.
- Disable Remote connection (if enabled).
- Reboot the phone.
- SSH is still listening on port 22 and is open not just via USB networking but completely open via WiFi connection.
With update 2 / Sailfish OS 1.0.2.5 disabling "Remote connection" still only disables password-based logins of user nemo. Key-based logins (authorized_keys) still work. Please stop the SSH daemon alltogether when the "Remote connection" setting is disabled.
Nirkus ( 2013-12-27 23:42:39 +0200 )edit