Disable Direct Root Login and User Access via SSH to Server

Everybody knows, including hackers and attackers that all Linux and UNIX flavored systems come with a all powerful root user account, which once get compromised, mean all hell breaks loose. So it’s a good security practice to disable the ability for root user to able to login and gain access to the server system via SSH directly (of course, the system must have disabled FTP access). After disabling direct root SSH remote login, the chance for the brute force hacking to success is greatly reduced.

To turn off and disable direct root SSH login, follow this simple tutorial:

IMPORTANT: Make sure you have another account (preferably belongs to wheel user group too) which is able to login via SSH remotely, and able to SU to root user account. Else you risk been locked out from your server.

1. SSH into server and login as root.
2. In command shell, use pico or vi to edit sshd_config file by typing one of the following commands:

   pico /etc/ssh/sshd_config
   vi /etc/ssh/sshd_config

3. Scroll down the SSH server configuration file and locate a line like below:

   #PermitRootLogin yes

4. Uncomment the line by removing the hash symbol (#), and then change the “yes” to “no”. The final line should look like below:

   PermitRootLogin no

5. Save the config file. In pico, press Ctrl-o, follow by Ctrl-x. In vi, type :wq and press Enter.
6. Restart SSH server by typing the following command in command line, and press Enter:

   /etc/rc.d/init.d/sshd restart

7. Logout from SSH connection. Try to login as root, it should fail with Access denied error. To access root account, login with your own user name and password, and then SU to root.

Share and contribute or get technical support and help at My Digital Life Forums.

Related Articles

• How to Get Linux Server Sends Email Alert on Root Login
• How to Disable or Enable Vista User Access Control in Command Prompt
• Reset the Root Password of MySQL Server
• Apple iPhone Root Password and Mobile User Password
• PCLoginNow (PC Login Now) Free Download to Reset Windows Admin or User Password
• Joomla Direct Access to This Location Is Not Allowed Error
• Gmail Access Methods and Login Link URLs
• Download Windows Server 2008 RC1 (Direct Links) with Free Product Key
• Download Internet Explorer 8 (IE8) Beta 1 (Direct Microsoft Server Links)
• Turn Off or Disable User Account Control (UAC) in Windows Vista

This entry was posted on Sunday, August 12th, 2007 at 3:34 am and is filed under Webmaster Resources. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.