Networks

Ask something
Question Locked

Disable Root Login

0 helpful
4 replies

by backtrack8083 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi!
Disabling Root login via SSH is considered a best security practice but i have a confusion that if we disable the root login won't it effect those initscripts which run using root as the user?
If the servers are remote, will it be OK to disable the root logins?
In case some severe problem arise will we be good?
Thanks in advance.

4 replies

by robo_dev

scripts don't actually login as root...they don't really login at all in most cases.

Scripts might need root privileges, and some scripts might even use SU or SUDO to elevate their privilege level, but if you have scripts that actually login as the user ROOT, then go fire your UNIX admin or at least hit him on the head with a copy of 'UNIX for dummies'. :)

In general, scripts should neither run as root or sudo to root, as either approach is unsafe. In order for the script to run, it would need to have the root password in it, which would be a handy thing for an attacker to find.

Many UNIX flavors disable root everywhere and you have to use SUDO to gain root equivalence.

by lyle148806

Best practice is to disable root login via SSH, if a user requires root privilege they can then su or sudo (preferred). We permit root login on the console but only as the last option in a disaster, and trawl the logs daily in case someone breaks this rule along with using su rather then sudo.

by backtrack8083

Thanks robo and lyle. Your information was very helpful. Thanks again..

This discussion is closed to new replies.