On: Users are losing out against Big Sur’s sealed System

[_abox]

In a way it's worse than Windows now. Microsoft doesn't lock parts of the filesystem or prevents you from editing files. As an example, I like to change /etc/ssh/sshd_config to permit only pubkey authentication. But even since Catalina it deletes any changes to this file with any system update.

[mPReDiToR → _abox]

Can you not chattr +i? Sometimes Linux updates need to be told no and that works for me.

[astrange → _abox]

Why doesn't sshd let you do that in a ~/.ssh/ file?

[Nextgrid → astrange]

Server configuration can't be done in ~/.ssh/* files.

[astrange → Nextgrid]

Yes, but why can't per-user server configuration be done in a per-user file? It's not any less secure than letting users change their own password.

[alacombe → astrange]

No, it has to be done in the server configuration.