Re: proper use of SSH?

From: Allen Kistler (ackistler_at_oohay.moc)
Date: 07/02/04 

Date: Fri, 02 Jul 2004 04:34:32 GMT

Wenjie wrote:
> I want to perform some admin activities remotely for my
> linux box. Firstly I think SSH is the choice.
>
> As mysql, apache etc has different owners/permissions for
> configure, I would like to get your opinion on the proper
> handling of SSH accounts: shall I create different accounts
> for different applications to be managed? Or shall I just
> create a user "root"? Or some sudo user?

Create a normal user account for yourself. su to root or whatever other
account you need (or use sudo). sshd_config has an option to allow root
login. You should set it as follows:

PermitRootLogin no

Relevant Pages

  • Re: ssh security
    ... what are valid accounts and what are not. ... It's considered axiomatic that security ... > system accounts (and over 99.9% are root, which does not get ssh access ... There are even some bots and apps that attack you from different IP ...
    (Fedora)
  • Re: How can I block IP address range with sshd_config
    ... > only log in through ssh. ... would deny access to all hosts in that range. ... >> through sshd using accounts guest and test tried again yesterday. ... as well as reading the comments in the ...
    (Fedora)
  • Re: Hacked mac
    ... Secret accounts? ... Re-install the system using Archive and Install. ... Some would argue that this isn't reasonably safe. ... When you turn ssh back on, either take steps to make sure every ...
    (comp.sys.mac.system)
  • Re: Options to block brute force attacks
    ... They would be unlikely to guess my root password, but who knows, I do ... I'm assuming that you have already limited SSH login to normal user ... accounts, excluding direct login to role accounts. ... theory, an attacker could break it, given enough time. ...
    (comp.security.ssh)
  • Re: mail program for FC6
    ... And I find the ability to drag messages among folders on different accounts on different machines to be much more convenient than whatever method you might use in mutt to accomplish that. ... it via SSH and putty from any Windows machine - I keep putty and my SSH ... This covers a lot more than email, but another approach to get better access than putty/ssh from a remote machine is with freenx on the fedora side and the NX client locally. ...
    (Fedora)