Why disallow root login? What's wrong with allowing root login via public key on... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		mooism2 on Feb 22, 2012 \| parent \| context \| favorite \| on: SSH Do’s and Don’ts Why disallow root login? What's wrong with allowing root login via public key only? Or via a public key limited by command="..."?

ichilton on Feb 22, 2012 | [–]

It's good practise first login as another user and then gain root priv's. This is auditable and if your sshd won't allow root login's, the can't be brute forced directly.

alexchamberlain on Feb 22, 2012 | [–]

Do you ever need root login?

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact