On 30 Nov 2011, at 18:51, Les Mikesell <lesmikesell at gmail.com> wrote: > Ssh is mostly about being able to log in. I've always adopted the policy of disabling root logins, making admins use a separate account with public/private key authentication and then requiring them to use su to elevate privileges. Has the advantage that your logs will tell you who logged in and performed an action rather than the vague 'root'. Ben Sent from my iPhone