Root vs Kali User: Should Remote SSH Permit Root Login?
0 reputation · 28 Dec 2023, 12:04 UTC
Goal
Enable secure remote administration on a fresh Kali Linux installation.
Constraints and Uncertainty
Kali ships with the kali user that has sudo privileges, while the root account is disabled by default to curb accidental system damage. Enabling root login requires setting a password and editing /etc/ssh/sshd_config to PermitRootLogin yes. Documentation recommends day‑to‑day use of the kali user and elevating privileges only when necessary. The trade‑off between operational convenience and security posture remains unresolved.
Questions
- Under what circumstances does Kali documentation explicitly endorse enabling
rootlogin for remote SSH? - What are the documented security implications of permitting
rootaccess versus usingsudofrom thekaliaccount? - Which configuration options (e.g., password, key‑based auth,
PermitRootLogin prohibit-password) are recommended when root access is required?