View Single Post
Old 08-29-2005, 09:17 PM   #1 (permalink)
incript_services
Hosting Master
Join Date: Aug 2005
Location: New Delhi,India
Posts: 250
incript_services is on a distinguished road
Disable Direct Root Logins

Allowing the root user to login directly is a major security issue, we'll show you how to disable it so you can still login as root but just not directly, reducing the security issue.

This will force a hacker to have to guess 2 seperate passwords to gain root access.
(you do have 2 seperate passwords for admin and root right?)
What happens is you'll first need to login as your admin user in SSH, then switch to the super user with the su command to get root.

We also will be forcing the use of SSH protocol 2, which is a newer, more secure SSH protocol
Just a couple more ways to help your server stay safe from the bad guys. If you're using cPanel make sure you add your admin user to the 'wheel' group so that you will be able to 'su -' to root, otherwise you may lock yourself out of root.

1. SSH into your server as 'admin' and gain root access by su

2. Copy and paste this line to edit the file for SSH logins
pico -w /etc/ssh/sshd_config

3. Find the line
Protocol 2, 1

4. Uncomment it and change it to look like
Protocol 2

5. Next, find the line
PermitRootLogin yes

6. Uncomment it and make it look like PermitRootLogin no

7. Save the file Ctrl+X then Y then enter

8. Now you can restart SSH
/etc/rc.d/init.d/sshd restart

Now, no one will be able to login to root with out first loggin in as admin and 'su -' to root, and you will be forcing the use of a more secure protocol. Just make sure you remember both passwords!
__________________
(Red Pepper)A Microsoft Products Blog with other Technology Updates.
incript_services is offline  
profile.gif home.gif sendpm.gif find.gif Reply With Quote
Old Sponsored Ads   # a.
Ads
Hosting Master
Join Date: Feb 2006
Location: HWHT
Posts: 1100
Ads is on a distinguished road



This message will go away once you are registered. Also, by registering, you will have access to all post topics, communicate privately with other members (PM), respond to polls, upload graphics, and access other special features! Registration is fast, simple and absolutely free so please Click Here to join our Web Hosting community today!
AdsPromoter is online
profile.gif sendpm.gif email.gif find.gif buddy.gif Reply With Quote