`PermitRootLogin = without-password` in /etc/ssh/sshd_config
Same thing for non-root: `AuthenticationMethods = publickey`
And when buying a router, buy something that will get regular security updates, or where you can put OpenWRT.
Same thing for non-root: `AuthenticationMethods = publickey`
And when buying a router, buy something that will get regular security updates, or where you can put OpenWRT.
* PermitRootLogin=without-password/prohibit-password now bans all
interactive authentication methods, allowing only public-key,
hostbased and GSSAPI authentication (previously it permitted
keyboard-interactive and password-less authentication if those
were enabled).
The /etc/sudoers NOPASSWD and sshd without-password sound like the same thing, but are far from that.
I feel like they could have named it better.