One of the biggest security holes is to allow direct logging in as root through ssh.
To disable it:
in /etc/ssh/sshd_config edit "PermitRootLogin no" and then `/etc/init.d/sshd restart`
But remember to add some user to the "wheel" group to be able 'su'
To disable it:
in /etc/ssh/sshd_config edit "PermitRootLogin no" and then `/etc/init.d/sshd restart`
But remember to add some user to the "wheel" group to be able 'su'