Disable Direct Root Login and User Access via SSH to Server

Everybody knows, including hackers and attackers that all Linux and UNIX flavored systems come with a all powerful root user account, which once get compromised, mean all hell breaks loose. So it’s a good security practice to disable the ability for root user to able to login and gain access to the server system via SSH directly (of course, the system must have disabled FTP access). After disabling direct root SSH remote login, the chance for the brute force hacking to success is greatly reduced.

To turn off and disable direct root SSH login, follow this simple tutorial:

IMPORTANT: Make sure you have another account (preferably belongs to wheel user group too) which is able to login via SSH remotely, and able to SU to root user account. Else you risk been locked out from your server.

1. SSH into server and login as root.
2. In command shell, use pico or vi to edit sshd_config file by typing one of the following commands:

   pico /etc/ssh/sshd_config
   vi /etc/ssh/sshd_config

3. Scroll down the SSH server configuration file and locate a line like below:

   #PermitRootLogin yes

4. Uncomment the line by removing the hash symbol (#), and then change the “yes” to “no”. The final line should look like below:

   PermitRootLogin no

5. Save the config file. In pico, press Ctrl-o, follow by Ctrl-x. In vi, type :wq and press Enter.
6. Restart SSH server by typing the following command in command line, and press Enter:

   /etc/rc.d/init.d/sshd restart

7. Logout from SSH connection. Try to login as root, it should fail with Access denied error. To access root account, login with your own user name and password, and then SU to root.

Related Articles

• How to Get Linux Server Sends Email Alert on Root Login
• How to Disable or Enable Vista User Access Control in Command Prompt
• Reset the Root Password of MySQL Server
• Apple iPhone Root Password and Mobile User Password
• PCLoginNow (PC Login Now) Free Download to Reset Windows Admin or User Password
• Change and Reset MySQL root Password
• Review Gmail Account Recent Login or Access Activity History and Remote Logout Intruder or Hacker
• Disable and Turn Off Windows XP Login Screen and Show Traditional NT Log On to Windows Box
• Gmail Access Methods and Login Link URLs
• Improve Apache Web Server Security: Use ServerTokens and ServerSignature to Disable Header

This entry was posted on Sunday, August 12th, 2007 at 3:34 am and is filed under Webmaster Resources. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.