Since i prefer keeping my ssh port on default 22, as well as using sudo on the box itsself, i do not require any root logins from external (which are normally bruteforced by crackers anyways).
# vim /etc/ssh/sshd_config PermitRootLogin no # service ssh restart