The 4th Linux kernel flaw this month can lead to stolen SSH host keys

The good news is there's already a patch. The bad news is that the fix isn't available for all Linux distributions yet.
OSTechNix

Linus Torvalds Just Patched a 6-Year Old Major Linux “File Descriptor Theft” Vulnerability

Learn how the ptrace_may_access bug lets attackers steal root files like SSH keys and shadow file. Find out if your Linux ...

Privilege escalation in Linux: Local users can read foreign files

The vulnerability was known for years, fixed Thursday. Hours later, an exploit is available as the kernel team prepares ...
TechRepublic

How to combine SSH key authentication and two-factor authentication on Linux

Jack Wallen shows you how to set up both two-factor authentication and SSH key authentication for a rock-solid remote login of your Linux servers. Chances are you administer your Linux machines by way ...
Hackaday

Grant Anyone Temporary Permissions To Your Computer With SSH

This is a super cute hack for you Linux users out there. If you have played around with SSH, you know it’s the most amazing thing since sliced bread. For tunneling in, tunneling out, or even just to ...
Network World

Setting up passwordless Linux logins using public/private keys

Using a set of public/private keys to allow you to log into a remote Linux system or run commands using ssh without a password can be very convenient, but setup is just tad tricky. Here's how and a ...
Linux Journal

SSH Key Rotation with the POSIX Shell - Sunset Nears for Elderly Keys

OpenBSD has recently stressed to us the value of key rotation by their use of “Signify” distribution release signatures. We have realized that SSH keys should also rotate, to reduce the risk of ...