> The default for PermitRootLogin was changed to prohibit-password back in 
> July.

To add to this it asks you if you wish to permit root login over SSH,
suggest that you say no, and tells you the default is no. So you had to
implicitly tell it root logon was allowed at install, or explicitly edit
the config file to allow for root logon.
I don't know if there is much else we could change to help protect users
from themselves.

-- 
  Jason Barbier
  [email protected]


Reply via email to