Root vs Kali User: Should Remote SSH Permit Root Login?

Question

Goal
Enable secure remote administration on a fresh Kali Linux installation.
Constraints and Uncertainty
Kali ships with the kali user that has sudo privileges, while the root account is disabled by default to curb accidental system damage. Enabling root login requires setting a password and editing /etc/ssh/sshd_config to PermitRootLogin yes. Documentation recommends day‑to‑day use of the kali user and elevating privileges only when necessary. The trade‑off between operational convenience and security posture remains unresolved.
Questions

Under what circumstances does Kali documentation explicitly endorse enabling root login for remote SSH?
What are the documented security implications of permitting root access versus using sudo from the kali account?
Which configuration options (e.g., password, key‑based auth, PermitRootLogin prohibit-password) are recommended when root access is required?

Zoha · Answer

Direct answer
Kali documentation only recommends enabling root SSH login in dedicated lab, penetration‑testing, or tool‑specific scenarios where a permanent root account is required and cannot be run via sudo.
Explanation
The default security posture limits root access to reduce accidental damage and maintain an audit trail through sudo. Enabling root login removes per‑command logging and increases exposure to brute‑force attacks, especially with password authentication.
Confirmed facts

Root SSH login is not part of the standard Kali security recommendations.
Allowing root access eliminates sudo’s granular escalation and audit logging.
Key‑based authentication mitigates the risk of static password credentials.

Steps for this case

Set a strong root password with passwd only if password authentication is intended.
Edit /etc/ssh/sshd_config and set PermitRootLogin prohibit-password for key‑only access, or yes if password authentication is required.
Place the root’s public key in /root/.ssh/authorized_keys.
Restart the SSH daemon: systemctl restart ssh.
Verify the setting with ssh root@host using the chosen authentication method.

Missing diagnostic detail
Do you plan to use password authentication or key‑based authentication for root login? This determines whether PermitRootLogin prohibit-password or yes is appropriate.

Root vs Kali User: Should Remote SSH Permit Root Login?

Goal

Constraints and Uncertainty

Questions

1 answer

Direct answer

Explanation

Confirmed facts

Steps for this case

Missing diagnostic detail

Your perspective belongs here.

0 question comments