Linux Hardening: Securing SSH Daemon Configurations

Secure Shell (SSH) is standard for remote server administration. Securing the SSH configuration file `/etc/ssh/sshd_config` prevents brute-force scans.

1. Disable Password Auth

Force the use of secure SSH cryptographic keys instead of simple password strings:

PasswordAuthentication no

2. Disable Root Login

Prevent direct root connections. Log in as a standard user first, then escalate permissions using `sudo`:

PermitRootLogin no

3. Change Default Port

Moving the SSH port from the default `22` to a high random port (e.g. `2202`) avoids 99% of automated credential spraying bots.