limit security impact of SSH access to service VMs #295

New issue

Open

opened 2025-04-01 21:01:07 +02:00 by kiara · 0 comments

kiara commented

2025-04-01 21:01:07 +02:00

Owner

notes

c.f. #24
split off from #272

implementation notes

ideas:

restrict ssh key commands
~~alternatively, access machines not by ssh but thru e.g. proxmox?~~
- such an endpoint is allegedly/apparently missing (/cc @kevin)

## notes - c.f. #24 - split off from #272 ### implementation notes ideas: - [restrict ssh key commands](https://research.kudelskisecurity.com/2013/05/14/restrict-ssh-logins-to-a-single-command/) - ~~alternatively, access machines not by ssh but thru e.g. proxmox?~~ - such an endpoint is [allegedly](https://forum.proxmox.com/threads/execute-command-in-node-with-api.112290/#post-484964)/[apparently](https://pve.proxmox.com/pve-docs/api-viewer/) missing (/cc @kevin)

kiara added a new dependency

2025-04-01 22:57:17 +02:00

#291 code passes security check

kiara added the

type: task

label

2025-05-01 11:58:46 +02:00

kiara changed title from ~~limit security impact of ssh access to service vms~~ to limit security impact of SSH access to service VMs

2025-12-02 19:48:36 +01:00

kiara added the

8 points

label