Rookit infections: AARRGH!

[Tom Buskey]

On 5/9/05, Bill McGonigle <bill at bfccomputing.com> wrote:
> On May 9, 2005, at 09:38, Fred wrote:
> 
> The reason to disable root account ssh login is just an odds game -
> every unix system is guaranteed to have a root user so it's a good one
> for password guessers to start with.  Any other account can be renamed.

root can be renamed.  The UID of 0 is the important part.

I know one site that renamed it to "clerk" to discourage people
wanting root access.  No one wants to be clerk.