Revision history [back]

Current implementation of disabling Remote connection in developer mode just disables login of nemo user but it doesn't completely disable the SSH daemon. I don't mind about the SSH listening on USB connection but I don't like the idea of having SSH daemon listening on the WiFi connection when connected to untrusted WiFi. Not that it's high-risk but it's another way how the security in the phone could be possibly exploited.

How to reproduce:

1. Go to Settings -> System settings -> Developer mode and enable it.
2. Disable Remote connection (if enabled).
3. Reboot the phone.
4. SSH is still listening on port 22 and is open not just via USB networking but completely open via WiFi connection.

Current implementation of disabling Remote connection in developer mode just disables login of nemo user but it doesn't completely disable the SSH daemon. I don't mind about the SSH listening on USB connection but I don't like the idea of having SSH daemon listening on the WiFi connection when connected to untrusted WiFi. Not that it's high-risk but it's another way how the security in the phone could be possibly exploited.

How to reproduce:

1. Go to Settings -> System settings -> Developer mode and enable it.
2. Disable Remote connection (if enabled).
3. Reboot the phone.
4. SSH is still listening on port 22 and is open not just via USB networking but completely open via WiFi connection.

Current implementation of disabling Remote connection in developer mode just disables login of nemo user but it doesn't completely disable the SSH daemon. I don't mind about the SSH listening on USB connection but I don't like the idea of having SSH daemon listening on the WiFi connection when connected to untrusted WiFi. Not that it's high-risk but it's another way how the security in the phone could be possibly exploited.

How to reproduce:

1. Go to Settings -> System settings -> Developer mode and enable it.
2. Disable Remote connection (if enabled).
3. Reboot the phone.
4. SSH is still listening on port 22 and is open not just via USB networking but completely open via WiFi connection.