RE: [suse-security] Problems with SuSE 9.1 - some issues aren't fixed for ages

As people have said, Philippe is mistaken to suggest nobody wants to allow root ssh logins. However, I think he is quite right to say the default setting should disallow it. I'm sure everyone on this list is quite smart enough to change the setting, but we need to protect the average user who knows little about sys admin but has learnt enough to turn on sshd so that they can login to their home computer from work or vice versa. A crucial selling point for Linux is that it is safer out of the box than Windows, and we want it to stay that way. Bob Vickers

Philippe Vogel wrote: ...

...

7)

Issue:

SSH allows root to login but imo nobody wants to have this.

Hotfix:

Edit /etc/ssh/sshd_config and restart sshd:

PermitRootLogin no ...