Is forbidding concurrent ssh sessions a good idea?

[Elazar Leibovich]

On Mon, Nov 12, 2012 at 8:33 PM, Dotan Shavit <dotan at shavitos.com> wrote:

>
> On 11/12/2012 10:05 AM, Elazar Leibovich wrote:
>
> I'm considering to disallow concurrent ssh sessions on a single-purpose
> production machine (say, DB server).
>
> You shouldn't...
> I'd just add 'who' to the end of the .profile / .bashrc / whatever  and
> echo some warning.
>
>
It'd be much more beneficial for everyone, if in addition to a yes/no
answer, you'll provide reasoning (for instance, what mischief can happen).

I'm not much of a fan of warnings. We have a MOTD which says roughly "This
is a production server, beware of changing it", which is largely ignored.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mailman.cs.huji.ac.il/pipermail/linux-il/attachments/20121112/e0b0f272/attachment.html>