Are you suggesting that Fedora should come with root logins disabled and as well as ssh via root turned off by default? If so, I'd not like that. If anything, I'd rather it be something that is a setup option so if someone wants to do that it can be done but deciding that for everyone is not the way to go.

On Mon, Oct 3, 2016 at 10:57 AM, Chris Murphy <lists@colorremedies.com> wrote:

Hi,

I'm noticing even with cockpit-0.117 in Fedora 24 Server, that it
supports ssh key assignment for users. Since it's possible to login to
cockpit out of the box, and setup ssh keys via the web interface, is
it now practical to set these by default in the F26/F27 time frame?
And if not, what additional work needs to be done?

Disable root logins with ssh
/etc/ssh/sshd_config PermitRootLogin no

Disable root entirely (sudo -i still works)
usermod -p '!' root

Disable password login with ssh (key only)
/etc/ssh/sshd_config PasswordAuthentication no

In my case I use all three as pretty much the first step for a new
Fedora 24 Server installation.

--
Chris Murphy
_______________________________________________
server mailing list -- server@lists.fedoraproject.org
To unsubscribe send an email to server-leave@lists.fedoraproject.org