Yura Gusev wrote:

>On 16 Sep 2001, Florin wrote:
>
>>[EMAIL PROTECTED] (Yura Gusev) writes:
>>
>>>Can you please disable root login by default.
>>>PermitRootLogin no
>>>
>>and why should we do that ?
>>
>
>Example brute-force attack. or bug in ssh.
>
I find it difficult to audit who has been root when people can login as 
root over the network. I usually let people login under their own 
account and then su to root (or sudo). At least you'll know who has been 
root on the system...

Stefan


Reply via email to