Shulou(Shulou.com)06/02 Report--

First, set ssh certificate login, prohibit root login

Useradd newuserpasswd newuservim / etc/ssh/sshd_configPermitRootLogin noRSAAuthentication yesPubkeyAuthentication yesPasswordAuthentication noClientAliveInterval 30ClientAliveCountMax 5

II. Prohibition of su

Vim / etc/pam.d/suauth required pam_wheel.so use_uidvim / etc/login.defsSU_WHEEL_ONLY yes

III. Sudo permission setting

Chmod 640 / etc/sudoersvim / etc/sudoerslity ALL= (ALL) ALLchmod 440 / etc/sudoers

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.