gluon-harden-dropbear

This package reduces the attack surface of dropbear, the SSH server on the router.

If the root account either has no password configured or is locked, password authorization is disabled in dropbear’s settings.

If furthermore no SSH key is authorized to login, the dropbear service is disabled.

Changing the password or updating authorized keys

Via console

Upon editing /etc/dropbear/authorized_keys or changing root’s password, a call to gluon-reconfigure as well as a reboot might be needed in order to have dropbear launched conditionally upon boot.

passwd
gluon-reconfigure
reboot

In setup-mode

As gluon-reconfigure is run when rebooting from the setup-mode web interface, no further steps are required.