Linux prohibit non-admin group normal user Login Superuser root

Source: Internet
Author: User
Tags auth ssh

As most people know, Linux has the highest privilege of root account, so it is necessary to prevent root login.

1: Prohibit normal users through Su-switch to Superuser root

[Root@localhost ~]# Su-test
[Test@localhost ~]$ su-#正常情况下, you can switch to the root environment
[Root@localhost ~]#
[Root@localhost ~]# grep ""/etc/pam.d/su
#auth Sufficient Trust Use_uid
Auth Required Use_uid #取消注释后, you cannot Su-login root
[Test@localhost ~]$ Su-
Su:incorrect Password
[Root@localhost ~]# usermod-g Wheel test #将test加入wheel组即可
[Root@localhost ~]# Su-test
[Test@localhost ~]$ Su-
[Root@localhost ~]#
[Root@localhost ~]# grep wheel/etc/group

2: SSH remote root login is prohibited

Cat >>/etc/ssh/sshd_config <<byrd
Port 22987 #修改为你需要的端口
Permitrootlogin No #禁止root远程登录
Permitemptypasswords No #禁止空密码登录
Usedns No #关闭DNS反向解析

3:visudo configuration permissions are configured properly

User_alias MASTER = Manage
Cmnd_alias MASTER = All,!/usr/sbin/visudo*,!/usr/bin/passwd root,!/usr/bin/vim/etc/passwd,!/bin/vi/etc/passwd, \
!/usr/bin/vim/etc/sudoers,!/bin/vi/etc/sudoers,!/bin/chmod,!/bin/chown,!/bin/chgrp #定义运维经理权限

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.