Disable ssh access as "root", but?

Question

linux

Hi all!
The question is painfully trivial.
But such a need arose:
There are users in the ROOT (0) group, and the root itself is actually included.
Actually disabling root"a:
in "/etc/ssh/sshd_config" set "PermitRootLogin no".
But other users with root rights and from the root group cannot connect via ssh and sftp
How to make sure that ssh is disabled only for the root user , and the rest of the root group could connect via ssh and sftp ?

Answer 1

No way.
Root is identified by ID 0, not by username.
PermitRootLogin denies access to the user with ID 0

Answer 2

Remove the password from the root user
, prohibit logging in as root
Configure the necessary users sudo
Everything. Everyone comes under him, if necessary - he uses sudo, and root himself as a separate interactive user is not needed, he is only needed to run init

Answer 3

Giving ID 0 to several users is a hack and generally hell in terms of information security. Use sudo, and root login should be prohibited immediately after installing the system and setting up sudo, because several users with ID 0 are about the same as the whole family working on Windows under a single Administrator account and then being surprised that we rearrange this system once a month but it's still buggy...