Disable Direct Root Login and User Access via SSH to Server

»»»Disable Direct Root Login and User Access via SSH to Server
Everybody knows, including hackers and attackers that all Linux and UNIX flavored systems come with a all powerful root user account, which once get compromised, mean all hell breaks loose. So it’s a good security practice to disable the ability for root user to able to login and gain access to the server system via SSH directly (of course, the system must have disabled FTP access). After disabling direct root SSH remote login, the chance for the brute force hacking to success is greatly reduced.

To turn off and disable direct root SSH login, follow this simple tutorial:

Make sure you have another account (preferably belongs to wheel user group too) which is able to login via SSH remotely, and able to SU to root user account. Else you risk been locked out from your server.
  1. SSH into server and login as root.
  2. In command shell, use pico or vi to edit sshd_config file by typing one of the following commands:
    pico /etc/ssh/sshd_config
    vi /etc/ssh/sshd_config
  3. Scroll down the SSH server configuration file and locate a line like below:
    #PermitRootLogin yes
  4. Uncomment the line by removing the hash symbol (#), and then change the “yes” to “no”. The final line should look like below:
    PermitRootLogin no
  5. Save the config file. In pico, press Ctrl-o, follow by Ctrl-x. In vi, type :wq and press Enter.
  6. Restart SSH server by typing the following command in command line, and press Enter:
    /etc/rc.d/init.d/sshd restart
  7. Logout from SSH connection. Try to login as root, it should fail with Access denied error. To access root account, login with your own user name and password, and then SU to root.

By |2016-12-09T08:39:38+00:00December 9th, 2016|Categories: Linux|Tags: , |1 Comment

About the Author:

LK is a technology writer for Tech Journey with background of system and network administrator. He has be documenting his experiences in digital and technology world for over 15 years.Connect with LK through Tech Journey on Facebook, Twitter or Google+.