#1038 closed enhancement (fixed)
dis-allow root login for sshd
| Reported by: | DJ Lucas | Owned by: | |
|---|---|---|---|
| Priority: | low | Milestone: | |
| Component: | BOOK | Version: | SVN |
| Severity: | minor | Keywords: | |
| Cc: |
Description ¶
add 'echo " PermitRootLogin no" >> /etc/ssh/sshd_config' or at least recommend it as a standard precaution.
Change History (3)
comment:1 by , 20 years ago
comment:2 by , 20 years ago
| Resolution: | → fixed |
|---|---|
| Status: | new → closed |
Note:
See TracTickets
for help on using tickets.
I will second this recommendation; even with secure password communication, I much prefer to not allow direct root logins over _any_ network connection.
In fact, I configure my systems to not even allow password-based authentication for SSH (protocol version 2 and public key auth only), but that's a little extreme as a standard recommendation :-)