<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote">2014-11-21 8:11 GMT+01:00 P J P <span dir="ltr"><<a href="mailto:pj.pandit@yahoo.co.in" target="_blank">pj.pandit@yahoo.co.in</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Sshd(8) daemon by default allows remote users to login as root.<br>
<br>
1. Is that really necessary?<br>
2. Lot of users use their systems as root, without even creating a non-root user.<br>
Such practices need to be discouraged, not allowing remote root login could be<br>
useful in that.<br>
<br>
Does it make sense to disable remote root login by default? If so, do we need to just report it to the maintainer or it would be treated as a feature?<br></blockquote><div><br></div><div>IIRC, the main reason for PermitRootLogin being enabled by default was to prevent a remote server from becoming inaccessible in cases such as a network mounted /home suddenly becoming unavailable.</div><div><br></div><div><br></div><div>Regards</div><div>Christian</div></div></div></div>