This question already has an answer here:
I've configured several systems manually. I'd like to start working more systematically now.
I configure openssh-server more strictly than Debian defaults, to exclude password-guessing attacks.
So I worked on some sequences for system configuration. I notice SSH is a problem. When you install openssh-server on Debian, it immediately starts running with the default configuration (unlike Fedora).
Question: suggest a sequence for securely configuring SSH which avoids this race condition.
E.g. I want to use SSH on one desktop system, where other users have never needed SSH access. They don't use any remote access to the system. Working to enforce "secure passwords" would waste our time. Limiting remote access in
/etc/sshd_config is simpler and better security.
I have also sometimes created local accounts for test purposes. (Embarrassingly, I had one such account fall victim to an SSH worm).