PermitRootLogin=yes disabled

[cat1510]

Hi,

how can i disable the direkt ssh acces to root user via password?
I want to add another user that has ssh access. When i need to be root on console then i can su -.
In config.xml is no way to define it and sshd_config is rewritten at any reboot.

Any suggestions?

CAT

[jimp]

The root user needs ssh access in order for scp to work.

Direct access to root or admin or any account is equally dangerous on the firewall.

You should protect access to ssh entirely, not just a specific user. If you switch to key-only auth, and limit access by IP, and for good measure change the port ssh runs on, it's safe even to login as root.