PermitRootLogin "without-password"

I'm running CPanel on a VPS with CentOS 7. I want to secure the SSH and have limited logins to use a certificate/sshkey. I've made a new user, 'myuser' and added him to the group 'wheel'. ssh_config

# Allowed Users
AllowUsers root myuser

# Enable/Disable tunneled clear text passwords
PasswordAuthentication no

visudo

## Allows people in group wheel to run all commands
%wheel  ALL=(ALL)       ALL

I am now only able to login using my sshkey. Any attempt to login with a password is rejected. Great! Now.. When I run 'My Security Advisor' in CPanel it tells me me to change PermitRootLogin to "without-password" or "no". (CSF does not give any complaint's regarding this matter.) I am a little inexperienced and do not want this server to go tits up. I do not need to login as root directly, but I do need to be able to 'su' and 'sudo'. Am I safe to change PermitRootLogin to "no" and still be able to 'su -' from 'myuser'?

SysSachin

March 05, 2017 07:02

Am I safe to change PermitRootLogin to "no" and still be able to 'su -' from 'myuser'?

Hello, Yes, you will be able to login using 'su -' from 'myuser' even if you have set PermitRootLogin to "no"

ronaldst

March 05, 2017 07:17

Thank you!

March 05, 2017 07:35

Hi, You are welcome If you are facing any issue then please update the post. I will check and assist you.

cPanelMichael

March 06, 2017 15:45

Hello, You may also find this thread helpful: [Tutorial] Interested in increasing the security of your server? Read this. (sshd hardening) Thanks!

PermitRootLogin "without-password"

Comments

Didn't find what you were looking for?