LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 02-10-2006, 12:36 AM   #1
Swakoo
Member
 
Registered: Apr 2005
Distribution: Red Hat / Fedora / CentOS
Posts: 508

Rep: Reputation: 30
SSH Security - Anti Root


Hi guys,

as we know to secure against root login via sshd,

it can be done by adding "DenyUser root"

Recently I realise there's an option "PermitRootUser" yes/no

What's the diff between the 2?
 
Old 02-10-2006, 01:15 AM   #2
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
AFAIK, there really isn't a difference in the way you are using it. PermitRootUser is the standard directive used by most people to block root logins and is pretty straight forward (yes/no), though it does accept other options like "without-password". The DenyUser directive is a little more flexible and allows you to do things like specifying "root@somehost".
 
Old 02-10-2006, 04:12 AM   #3
Swakoo
Member
 
Registered: Apr 2005
Distribution: Red Hat / Fedora / CentOS
Posts: 508

Original Poster
Rep: Reputation: 30
Ooooh

didn't know 'DenyUsers' can be used to specify permission for different source of connection, cool!
 
Old 02-10-2006, 12:21 PM   #4
Capt_Caveman
Senior Member
 
Registered: Mar 2003
Distribution: Fedora
Posts: 3,658

Rep: Reputation: 69
Checkout the sshd_config man page. It's got a more in depth of explanation of the various things you can filter with.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
I have to ssh -l root to run root processes!? paul.nel Red Hat 3 11-15-2004 11:55 AM
Cannot enable anti-aliasing fonts under Root Techweenie1 Slackware 2 05-09-2004 11:49 PM
Creating an ultimate anti-virus and anti-spam email gateway markcc Linux - Networking 2 10-08-2003 03:10 AM
Internet security - firewall & anti virus bobirt Linux - Security 2 12-20-2001 08:45 AM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 04:55 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration