F22 System Wide Change: Set sshd(8) PermitRootLogin=no

[P J P]

  Hello Dennis,


> On Tuesday, 13 January 2015 10:05 PM, Dennis Gilmore wrote:
> There is no consensus on that.

  Well, no opposition as such either. How is it done otherwise,
do we conduct votes to establish consensus, is that a usual practice?

> I do not do enough installs that I use kickstart so can not put
> a key in place. On a freshly installed system I have to log in
> as root with a password to do configuration. I strongly suspect
> that I am not alone here. You need to talk to the anaconda team
> and work out a plan to deal with all the different options.
> up to and including having the current defaults exist when only a root
> account is configured with only a password for authentication. I suspect
> that to properly support making changes here it needs to be strongly
> tied into anaconda changes that manage the initial sshd config file.
  True. I plan to talk to them about the proposed workflow changes;
One of which caters to the case wherein only 'root' user is needed.

  "Omission of such user account should prompt user if they wish to enable remote 'root' login and set the parameter appropriately."  OR  Other way could be to just enable remote 'root' login when no non-root account is created by the user.

Let's see, they might have other suggestions.
---Regards
   -Prasad
http://feedmug.com