On a server I have a public key auth only for root account. Is there any point of logging in with a different account?

  • esa@discuss.tchncs.de
    link
    fedilink
    arrow-up
    9
    ·
    4 days ago

    If ssh has a security issue and you permit root logins then hostiles likely have an easier time getting access to root on the machine than if they only get access to your user account—then they need multiple exploits.

    Generally you also want to be root as little as possible. Hence sudo, run0, etc.