If you run Rootkit Hunter and you haven’t modified your stock Red Hat configuration of the SSH service (sshd), chances are it will find that you allow root logins. Rootkit Hunter considers these as possible security risks. However, to fix this, you can simply login as root, fire up a text editor, and edit the file
Make the following changes:
You’ll find a commented line like this:
Uncomment it and change it to:
This will disallow logins using the older versions of the protocol
Look for the commented line
Uncomment the line and change it so it reads:
This will configure sshd NOT to allow root logins.
After this, be sure to restart sshd (assuming you run the service in the first place so:
Service sshd restart
By the way Rootkit scanner is scanning tool to ensure you for about 99.9% you’re clean of nasty tools. This tool scans for rootkits, backdoors and local exploits.