From a security standpoint should I disable the root account for my personal computer running Debian 9.1?
And if so: what would be the best way to do this?
There are different reasons to disable root account, for example:
Your system is available on a network and you want to protect yourself against brute force attacks, so no one can guess your root account password.
Developers wants to stop the users from running a command like
su - to get a full root shell, because it's now a lot easier to do something wrong which causes damage to the system. however they can still use something like
sudo /bin/some-shell or even
sudo su - if they are in sudoers file
The idea is to force the user to use the
sudo instead of sharing a single root password between all users and using the
sudo comes with some advantages, for example:
sudopermissions expires after a while.
To disable, you can remove the password of the account or lock it down, or even do both of them:
Remove the root password:
sudo passwd -d root
Lock the account:
sudo passwd -l root