SSH Security - Anti Root
 

Hi guys,

as we know to secure against root login via sshd,

it can be done by adding "DenyUser root"

Recently I realise there's an option "PermitRootUser" yes/no

What's the diff between the 2?

AFAIK, there really isn't a difference in the way you are using it. PermitRootUser is the standard directive used by most people to block root logins and is pretty straight forward (yes/no), though it does accept other options like "without-password". The DenyUser directive is a little more flexible and allows you to do things like specifying "root@somehost".

Ooooh

didn't know 'DenyUsers' can be used to specify permission for different source of connection, cool!

Checkout the sshd_config man page. It's got a more in depth of explanation of the various things you can filter with.