حل مشكلة whm SSH direct root logins are permitted
WHM Terminal and sshd-config setting PermitRootLogin to no
PermitRootLogin to “without-password” or “no”What is the different?
الفرق بين PermitRootLogin"without-password" vs "no"



رسالة تنبيه Security Advisor

Manually edit /etc/ssh/sshd_config and change PermitRootLogin to “without-password” or “no”, then restart SSH in the “Restart SSH” area
-------------------------------------------------------------
اهمية الحماية direct root logins are permitted
-------------------------------------------------------------

A dictionary attack uses a brute-force technique of successively trying all the words in an exhaustive list called a dictionary (from a pre-arranged list of values). In contrast with a normal brute force attack, where a large proportion key space is searched systematically, a dictionary attack tries only those possibilities which are most likely to succeed, typically derived from a list of words for example a dictionary (hence the phase dictionary attack) or a bible etc. Generally, dictionary attacks succeed because many people have a tendency to choose passwords which are short (7 characters or fewer), single words found in dictionaries or simple, easily-predicted variations on words, such as appending a digit.

If an attacker wants to break your server, he first needs to guess the username, and then try to gess the password for that username, so the more common dictionary attacks are done to the root password, there are two reasons to do it that way.

  1. Almost all systems has root accounts (Ubuntu does not have it enabled)
  2. If someone gain access to your server with the root accout it will have full access to the server


-------------------------------------------------------------
هناك طريقتين لحماية Root Account فى الشيل
-------------------------------------------------------------
So there are two simple ways to avoid the possibility of an attack to the root account
PermitRootLogin to “without-password” or “no”What is the different?

قم بفتح terminal ثم ضع هذا الامر

كود:
nano /etc/ssh/sshd_config
ثم ابحث عن PermitRootLogin yes وقم بتبديل yes
اما “without-password” or “no”

-------------------------------------------------------------
الطريقة الاولي : PermitRootLogin without-password
-------------------------------------------------------------
الميزة : يتم استخدام حساب root الافتراضي
Enable root access via ssh, but only with rsa key



Edit the file /etc/ssh/sshd_config Look for this line
#PermitRootLogin yes
And change it to: PermitRootLogin without-password
* ملحوظة قم يحذف # لكي يفعل الامر
allows root, but *only* if keys are set up, or another form of authentication,'
but *not* password authentication; - it will deny even a valid password.

-------------------------------------------------------------
الطريقة الثانية : PermitRootLogin no
-------------------------------------------------------------
الميزة : لايتم استخدام حساب root الافتراضي وهيتطلب اعطاء صلاحيات لحساب اخر
Disable root access via ssh to your server



Edit the file /etc/ssh/sshd_config Look for this line
#PermitRootLogin yes
And change it to: PermitRootLogin no
* ملحوظة قم يحذف # لكي يفعل الامر
denies root all the time, even if keys have been set up for equivalence.

-------------------------------------------------------------
عمل حساب بديل للـ root له كامل الصلاحيات من خلال Manage Wheel Group Users
-------------------------------------------------------------



ملحوظة : تنفيذ الحماية لا يؤثر ولا يغلق Terminal وستتمتع به داخل whm


ننصح بالطريقة الاولي لكي تكون الخطوات اسهل عليك وغير معقدة
بجانب حماية الشيل مع تغيير رقم البورت + مفتاح الدخول المولد بتكون الحماية قوية
فى النهاية هيكون الحماية للشيل تم تنفيذها ورسالة التنبيه فى cPanel Security Advisor اختفت.

شاهد ايضا :

شرح توليد مفتاح Public/Private Key فى برنامج putty للشيل whm

شرح تغيير بورت الشيل change SSH Port with WHM & CSF
شرح انشاء مفتاح Generate private and public key in cPanel for SSH access

شرح تعطيل و تفعيل Disable Root Logins & Replace With SSH Key