Abotu setting 'PermitRootLogin=no' in sshd_config

Dennis Gilmore dennis at ausil.us
Mon Nov 24 00:44:06 UTC 2014


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Fri, 21 Nov 2014 07:11:27 +0000 (UTC)
P J P <pj.pandit at yahoo.co.in> wrote:

>     Hello,
> 
> Sshd(8) daemon by default allows remote users to login as root.
> 
>   1. Is that really necessary?
>   2. Lot of users use their systems as root, without even creating a
> non-root user. Such practices need to be discouraged, not allowing
> remote root login could be useful in that.
> 
> Does it make sense to disable remote root login by default? If so, do
> we need to just report it to the maintainer or it would be treated as
> a feature?

I think its a bad idea, but I say so as a user that when installing a
new system, especially a remove vm  will log in as root via ssh and
join the machine post install to my ipa domain.

Dennis
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=DRcf
-----END PGP SIGNATURE-----


More information about the devel mailing list