4 ms·
What if you can't disable root login (i.e. it's a cloud server)?
by chanri 16y ago
What if you can't disable root login (i.e. it's a cloud server)?
- steve19 16y agoRestrict root login from a particular IP address AllowUsers root@112.113.114.115 I use AllowUsers to ensure only users I want can login from SSH.
- spicyj 16y agoBut what if your IP address changes?
- cuu508 16y agoRoot login shouldn't be your normal entrance. For maintenance stuff use sudo-capable regular user account with public key authentication. If there's some software that requires root login and you cannot do anything about it, enable root login and allow it only from the specific IPs.
- Estragon 16y agoWhy can't you disable root login on a cloud server?
- dedward 16y agoThis is where firewalls come in handy... Disabling remote root login isn't as big a deal as it used to be - as others have said, if someone gets your administrative account you're pretty screwed anyway - and if they get your password for sudo, it's the same thing. Other than that, it really depends on what you mean by cloud.
- rjbond3rd 16y agoThere's no reason you can't disable root logins on a cloud server. I do it every time.