Ridding myself of root passwords?

Lonnie Olson lists at kittypee.com
Mon Feb 3 11:48:50 MST 2014


On Sun, Feb 2, 2014 at 4:55 PM, S. Dale Morrey <sdalemorrey at gmail.com> wrote:
> Has anyone here managed to completely eliminate a root password once it's
> set?
> I setup a server to be certificate auth for SSH.  But I seem to still be
> able to SSH in with a password too.

/etc/ssh/sshd_config
PermitRootLogin no  # root cannot login at all
or
PermitRootLogin without-password  # root can only login via SSH keys

Or go a step further and lock the user root completely and rely on
sudo for privilege escalation.
usermod -L root

--lonnie


More information about the PLUG mailing list