attack 2

[Dave Cross]

On 5/11/05, wj <wayne at zkcelltest.com> wrote:
> On Tue, 2005-05-10 at 22:44 -0700, Richard Crawford wrote:
> > On Tuesday 10 May 2005 22:23, jim lawrence wrote:
> > > How do you disable root ssh logins ?
> >
> > In /etc/ssh/ssh_config
> >
> > Uncomment this line, if it is commented out:
> >
> > PermitRootLogin yes
> >
> > and change it to:
> >
> > PermitRootLogin no
> >
> > Then restart the ssh daemon:
> >
> > # /etc/init.d/sshd restart
> >
> 
> Hmm ...
> 
> I went to disable mine, I am behind a firewall but I am trying to learn
> how to make my system more secure, and I think that my sshd_config the
> line is already commented out:
> 
> #PermitRootLogin yes
> 
> I just did a fresh install a few days ago and I know I have not changed
> it. Maybe there was a security update that fixed this issue?

No. Nothing has been fixed. Please re-read the mail that you quoted.

If the "PermitRootLogin" setting is commented out then it is having no
effect. Root logins are _not_ being barred.

You need to uncomment the line _and_ change the 'yes' to a 'no' for it
to have any effect.

Dave...