ssh - root user

[holdahl]

How is it possible to disable root login from ssh but still allow root to use commands like scp?


-holdahl

 

[khalidaaa]

As far as i know, you have to have ssh enabled for you to use scp.

Regards,
Khalid

 

[TSch]

Maybe you could just restrict the root access to a speficic (and empty) directory using chroot as a workaround ...

This would mean that the root user would still be able to login but could'nt do any harm because

a) he would be unable to leave the directory
b) you can also prevent him from using any command (cd, ls, rm, mkdir, e.g.)

Regards
Thomas

 

[HelloNair]

You can create a custom .profile to recognise an ssh session and to do an exit.

 

[exsnafu]

my advice is that if you intend to restrict remote login to root via ssh then you need to restrict scp as well or there isn't much point in it.

scp can be used to undo most any restrictions you put in, if you start trying to get clever with keeping root from an interactive usable shell you could also end up with some undesired and unintended consequences. either lock remote root or dont.

scp data as a regular user and chown/move/whatever as root if youu must.