Disable Root Login -KodeKloud

DisableRootLogin.md

Disable Root Login

After doing some security audits of servers, xFusionCorp Industries security team has implemented some new security policies. One of them is to disable direct root login through SSH. Disable direct SSH root login on all app servers in Stratos Datacenter.

Click on ✔ and Do Task Again

Solution:-

Open Three Terminal and ssh on all App server

on Terminal one

ssh tony@stapp01  

on Terminal Two

ssh steve@stapp02

on Terminal three

ssh banner@stapp03

Run the below command on each app server and Search for #PermitRootLogin yes

sudo vi /etc/ssh/sshd_config

Remove the "#" and change "yes" to "no" according to image

sudo systemctl restart sshd

Nice on, it works like magic

but i can still root login when i m under tony on stapp01.

if i m tony on stapp01 i can do 'sudo su - ' - and still be root.

however if i totally out of stapp01 - and do
ssh root@stapp01 - then 'permission denied'

is this how it works?