{"id":2994,"date":"2026-10-24T15:00:00","date_gmt":"2026-10-24T12:00:00","guid":{"rendered":"https:\/\/narhost.com\/destek\/?p=2994"},"modified":"2026-10-24T15:00:00","modified_gmt":"2026-10-24T12:00:00","slug":"permitrootlogin-no-ubuntu","status":"publish","type":"post","link":"https:\/\/narhost.com\/destek\/permitrootlogin-no-ubuntu\/","title":{"rendered":"Ubuntu 24.04&#8217;te SSH ile Root Giri\u015fi Nas\u0131l Kapat\u0131l\u0131r"},"content":{"rendered":"<p class=\"kb-dogrulama\">Son g\u00f6zden ge\u00e7irme: Ekim 2026 \u00b7 Ubuntu 24.04 OpenSSH sunucu belgesi ve sshd_config k\u0131lavuz sayfas\u0131na g\u00f6re<\/p>\n<div id=\"hizli-cozum\" class=\"ai-box ai-box--cozum\">\n<p class=\"ai-box-title\">H\u0131zl\u0131 \u00e7\u00f6z\u00fcm<\/p>\n<p><strong>PermitRootLogin no<\/strong> Ubuntu sunucularda root hesab\u0131yla SSH giri\u015fini tamamen kapat\u0131r; y\u00f6netim sudo yetkili ayr\u0131 bir kullan\u0131c\u0131yla yap\u0131l\u0131r. S\u0131ra \u00f6nemlidir, yoksa sunucuya eri\u015fiminizi kaybedersiniz:<\/p>\n<ol>\n<li>Sudo yetkili yeni bir kullan\u0131c\u0131 olu\u015fturun ve SSH anahtar\u0131n\u0131z\u0131 ona kopyalay\u0131n.<\/li>\n<li>Yeni kullan\u0131c\u0131yla ikinci bir oturumda girip <code>sudo<\/code>&#8216;nun \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 do\u011frulay\u0131n.<\/li>\n<li><code>\/etc\/ssh\/sshd_config.d\/<\/code> alt\u0131nda <code>PermitRootLogin no<\/code> sat\u0131r\u0131 olan bir dosya olu\u015fturun.<\/li>\n<li><code>sudo sshd -t<\/code> ile denetleyip <code>sudo systemctl restart ssh.service<\/code> ile uygulay\u0131n.<\/li>\n<\/ol>\n<\/div>\n<table class=\"kb-uyg\">\n<tr>\n<th>Panel<\/th>\n<td>SSH (komut sat\u0131r\u0131)<\/td>\n<\/tr>\n<tr>\n<th>Sistem<\/th>\n<td>Ubuntu 24.04 ve 22.04 (OpenSSH sunucusu)<\/td>\n<\/tr>\n<tr>\n<th>Yetki<\/th>\n<td>root<\/td>\n<\/tr>\n<tr>\n<th>Narhost \u00fcr\u00fcn\u00fc<\/th>\n<td><a href=\"https:\/\/narhost.com\/vps-sunucu\" title=\"Narhost VPS Sunucu paketleri\">VPS Sunucu<\/a>, VDS Sunucu<\/td>\n<\/tr>\n<\/table>\n<div class=\"kb-once\">\n<p class=\"label\">Ba\u015flamadan \u00f6nce<\/p>\n<ul>\n<li>Root olarak a\u00e7\u0131k bir SSH oturumunuz olsun ve i\u015flem bitene kadar kapatmay\u0131n.<\/li>\n<li>Sunucuya konsol (taray\u0131c\u0131 terminali) eri\u015fiminizin \u00e7al\u0131\u015ft\u0131\u011f\u0131n\u0131 bilin; bir hata olursa oradan d\u00fczeltirsiniz.<\/li>\n<li>Bilgisayar\u0131n\u0131zda bir SSH anahtar \u00e7ifti haz\u0131r olsun.<\/li>\n<\/ul>\n<\/div>\n<h2>PermitRootLogin no Ubuntu sunucuda ne sa\u011flar<\/h2>\n<p>\u0130nternete a\u00e7\u0131k her sunucuya, en \u00e7ok <code>root<\/code> kullan\u0131c\u0131 ad\u0131 denenerek s\u00fcrekli parola tahmin denemeleri yap\u0131l\u0131r. Root giri\u015fini kapatmak, sald\u0131rgan\u0131n hem kullan\u0131c\u0131 ad\u0131n\u0131 hem parolay\u0131 bilmesini zorunlu k\u0131lar ve her y\u00f6netim i\u015fleminin kimin taraf\u0131ndan yap\u0131ld\u0131\u011f\u0131n\u0131 kay\u0131tlara d\u00fc\u015f\u00fcr\u00fcr.<\/p>\n<p>Ubuntu&#8217;nun <a href=\"https:\/\/manpages.ubuntu.com\/manpages\/noble\/man5\/sshd_config.5.html\" title=\"Ubuntu k\u0131lavuz sayfas\u0131 \u2014 sshd_config ve PermitRootLogin\" target=\"_blank\" rel=\"noopener\">sshd_config k\u0131lavuz sayfas\u0131na<\/a> g\u00f6re <code>PermitRootLogin<\/code> de\u011ferinin varsay\u0131lan\u0131 <code>prohibit-password<\/code>&#8216;d\u00fcr: root parolayla giremez ama anahtarla girebilir. <code>no<\/code> de\u011feri anahtarla giri\u015fi de kapat\u0131r. K\u0131lavuz bir kural\u0131 daha belirtir: ayn\u0131 ayar birden fazla yerde yaz\u0131l\u0131ysa okunan ilk de\u011fer ge\u00e7erlidir. Ubuntu&#8217;da <code>\/etc\/ssh\/sshd_config<\/code> dosyas\u0131 en ba\u015fta <code>sshd_config.d<\/code> klas\u00f6r\u00fcndeki dosyalar\u0131 okur; bu y\u00fczden ayar\u0131 o klas\u00f6re yazmak do\u011fru y\u00f6ntemdir.<\/p>\n<figure class=\"nh-sema\"><img src=\"https:\/\/narhost.com\/destek\/wp-content\/uploads\/2026\/10\/permitrootlogin-no-ubuntu-sema-narhost.webp\" alt=\"permitrootlogin no ubuntu uygulama \u015femas\u0131 \u2014 sudo kullan\u0131c\u0131s\u0131, anahtar, ikinci oturum ve ayar dosyas\u0131\" width=\"1200\" height=\"500\" loading=\"lazy\" decoding=\"async\"><figcaption>Yeni kullan\u0131c\u0131yla giri\u015f do\u011frulanmadan root giri\u015fi kapat\u0131lmaz.<\/figcaption><\/figure>\n<h2>Ad\u0131m ad\u0131m root giri\u015fini kapatma<\/h2>\n<ol class=\"kb-adimlar\">\n<li><strong>Sudo yetkili kullan\u0131c\u0131 olu\u015fturun.<\/strong>\n<pre><code class=\"language-bash\">adduser yonetici\nusermod -aG sudo yonetici<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>adduser<\/code> parola ve iste\u011fe ba\u011fl\u0131 bilgileri sorar; ikinci komut \u00e7\u0131kt\u0131 vermez.<\/p>\n<\/li>\n<li><strong>Anahtar\u0131n\u0131z\u0131 yeni kullan\u0131c\u0131ya kopyalay\u0131n.<\/strong> Root&#8217;un yetkili anahtarlar\u0131n\u0131 yeni kullan\u0131c\u0131ya ta\u015f\u0131y\u0131n:\n<pre><code class=\"language-bash\">rsync --archive --chown=yonetici:yonetici ~\/.ssh \/home\/yonetici<\/code><\/pre>\n<\/li>\n<li><strong>\u0130kinci oturumda deneyin.<\/strong> Bilgisayar\u0131n\u0131zda yeni bir terminal a\u00e7\u0131p <code>ssh yonetici@203.0.113.10<\/code> ile ba\u011flan\u0131n ve <code>sudo whoami<\/code> \u00e7al\u0131\u015ft\u0131r\u0131n.\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: parolan\u0131z sorulur ve \u00e7\u0131kt\u0131 <code>root<\/code> olur. Bu ad\u0131m ba\u015far\u0131l\u0131 olmadan devam etmeyin.<\/p>\n<\/li>\n<li><strong>Ayar dosyas\u0131n\u0131 olu\u015fturun.<\/strong> Root oturumunda:\n<pre><code class=\"language-bash\">echo \"PermitRootLogin no\" &gt; \/etc\/ssh\/sshd_config.d\/00-root-kapali.conf<\/code><\/pre>\n<p>Dosya ad\u0131n\u0131n <code>00-<\/code> ile ba\u015flamas\u0131, klas\u00f6rdeki di\u011fer dosyalardan \u00f6nce okunmas\u0131n\u0131 ve de\u011ferin ge\u00e7erli olmas\u0131n\u0131 sa\u011flar.<\/p>\n<\/li>\n<li><strong>Denetleyip uygulay\u0131n.<\/strong>\n<pre><code class=\"language-bash\">sshd -t\nsystemctl restart ssh.service<\/code><\/pre>\n<p class=\"kb-cikti\">Beklenen sonu\u00e7: <code>sshd -t<\/code> hata yoksa \u00e7\u0131kt\u0131 vermez. Yeniden ba\u015flatma a\u00e7\u0131k oturumlar\u0131 kesmez. Komutlar <a href=\"https:\/\/documentation.ubuntu.com\/server\/how-to\/security\/openssh-server\/\" title=\"Ubuntu Server belgesi \u2014 OpenSSH sunucusu\" target=\"_blank\" rel=\"noopener\">Ubuntu OpenSSH sunucu belgesinde<\/a> anlat\u0131l\u0131r.<\/p>\n<\/li>\n<\/ol>\n<div class=\"warn-box\">\n<p class=\"label\">Dikkat<\/p>\n<p>Yeni kullan\u0131c\u0131yla giri\u015fi ve <code>sudo<\/code>&#8216;yu denemeden root giri\u015fini kapatmay\u0131n. Root oturumunu da yeni kullan\u0131c\u0131yla ba\u011flant\u0131y\u0131 do\u011frulayana kadar a\u00e7\u0131k tutun; bir sorun \u00e7\u0131karsa ayar dosyas\u0131n\u0131 silip hizmeti yeniden ba\u015flatarak eski duruma d\u00f6nersiniz.<\/p>\n<\/div>\n<h2>Do\u011frulama<\/h2>\n<div class=\"success-box\">\n<p class=\"label\">Sonu\u00e7<\/p>\n<p><code>sudo sshd -T | grep -i permitrootlogin<\/code> komutu <code>permitrootlogin no<\/code> g\u00f6steriyor, yeni bir terminalden <code>ssh root@203.0.113.10<\/code> denemesi &#8220;Permission denied&#8221; ile reddediliyor ve <code>yonetici<\/code> kullan\u0131c\u0131s\u0131yla giri\u015f \u00e7al\u0131\u015f\u0131yorsa ayar tamamd\u0131r.<\/p>\n<\/div>\n<h2>H\u00e2l\u00e2 \u00e7\u00f6z\u00fclmediyse<\/h2>\n<ul>\n<li><strong>Ayar etkisiz g\u00f6r\u00fcn\u00fcyor.<\/strong><code>sshd_config.d<\/code> i\u00e7indeki ba\u015fka bir dosya ayn\u0131 ayar\u0131 daha \u00f6nce tan\u0131ml\u0131yordur; <code>grep -ri permitrootlogin \/etc\/ssh\/<\/code> ile bulun ve dosya ad\u0131n\u0131z\u0131n \u00f6nce okundu\u011fundan emin olun.<\/li>\n<li><strong>Yeni kullan\u0131c\u0131yla anahtar reddediliyor.<\/strong> Klas\u00f6r izinleri yanl\u0131\u015ft\u0131r; \u00e7\u00f6z\u00fcm <a href=\"https:\/\/narhost.com\/destek\/ssh-permission-denied-publickey-hatasi\/\" title=\"SSH Permission Denied (publickey) Hatas\u0131 \u2014 Narhost Destek Merkezi\">SSH Permission denied (publickey) hatas\u0131<\/a> kart\u0131nda.<\/li>\n<li><strong>Kullan\u0131c\u0131 ve sudo ayar\u0131.<\/strong> Kullan\u0131c\u0131 y\u00f6netiminin ayr\u0131nt\u0131lar\u0131 <a href=\"https:\/\/narhost.com\/destek\/linux-kullanici-ekleme-sudo-yetkisi\/\" title=\"Linux&#039;ta Kullan\u0131c\u0131 Ekleme ve Sudo Yetkisi \u2014 Narhost Destek Merkezi\">Linux&#8217;ta kullan\u0131c\u0131 ekleme ve sudo yetkisi<\/a> kart\u0131nda.<\/li>\n<\/ul>\n<div class=\"cta-box\">\n<p class=\"label\">Narhost deste\u011fi<\/p>\n<p>VPS ve VDS sunucular y\u00f6netimsizdir; sunucu i\u00e7indeki SSH ayarlar\u0131 sizin sorumlulu\u011funuzdad\u0131r. Eri\u015fiminizi kaybettiyseniz ve konsola da giremiyorsan\u0131z talebe sunucu ad\u0131n\u0131 ve yapt\u0131\u011f\u0131n\u0131z son de\u011fi\u015fikli\u011fi ekleyin.<\/p>\n<p><a class=\"cta-btn\" href=\"https:\/\/narhost.com\/submitticket.php\" title=\"Narhost destek talebi a\u00e7\">Destek talebi a\u00e7<\/a><\/div>\n<div class=\"kb-ilgili\">\n<p class=\"label\">Sonraki ad\u0131mlar<\/p>\n<ul>\n<li><a href=\"https:\/\/narhost.com\/blog\/ssh-key-mi-sifre-mi\/\" title=\"SSH Anahtar\u0131 m\u0131 Parola m\u0131 \u2014 Narhost Blog\">SSH anahtar\u0131 m\u0131 parola m\u0131, g\u00fcvenli giri\u015f karar\u0131<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ufw-guvenlik-duvari-kurulumu\/\" title=\"UFW G\u00fcvenlik Duvar\u0131 Kurulumu \u2014 Narhost Destek Merkezi\">UFW g\u00fcvenlik duvar\u0131 kurulumu<\/a><\/li>\n<li><a href=\"https:\/\/narhost.com\/destek\/ubuntu-otomatik-guvenlik-guncellemeleri\/\" title=\"Ubuntu Otomatik G\u00fcvenlik G\u00fcncellemeleri \u2014 Narhost Destek Merkezi\">Ubuntu otomatik g\u00fcvenlik g\u00fcncellemeleri<\/a><\/li>\n<\/ul>\n<\/div>\n<div class=\"kb-faq\">\n<h2>S\u0131k\u00e7a sorulan sorular<\/h2>\n<h3>PermitRootLogin no ile prohibit-password aras\u0131ndaki fark ne?<\/h3>\n<p><code>prohibit-password<\/code> root&#8217;un parolayla giri\u015fini kapat\u0131r ama SSH anahtar\u0131yla giri\u015fe izin verir; OpenSSH&#8217;nin varsay\u0131lan\u0131d\u0131r. <code>no<\/code> root giri\u015fini her y\u00f6ntemle kapat\u0131r. Y\u00f6netimi ayr\u0131 bir kullan\u0131c\u0131yla yap\u0131yorsan\u0131z <code>no<\/code> daha s\u0131k\u0131 bir ayard\u0131r.<\/p>\n<h3>Root giri\u015fi kapal\u0131yken root yetkisi gereken i\u015fleri nas\u0131l yapar\u0131m?<\/h3>\n<p>Sudo grubundaki kullan\u0131c\u0131yla girip komutlar\u0131n ba\u015f\u0131na <code>sudo<\/code> yazars\u0131n\u0131z. Uzun i\u015flemlerde <code>sudo -i<\/code> ile root kabu\u011funa ge\u00e7ebilirsiniz; bu, SSH \u00fczerinden do\u011frudan root giri\u015finden farkl\u0131d\u0131r ve kay\u0131t b\u0131rak\u0131r.<\/p>\n<h3>Ayar\u0131 yapt\u0131ktan sonra sunucuya giremiyorum, ne yapmal\u0131y\u0131m?<\/h3>\n<p>Taray\u0131c\u0131 terminali gibi konsol eri\u015fimiyle girin, <code>\/etc\/ssh\/sshd_config.d\/00-root-kapali.conf<\/code> dosyas\u0131n\u0131 silin ve <code>systemctl restart ssh.service<\/code> \u00e7al\u0131\u015ft\u0131r\u0131n. Ard\u0131ndan yeni kullan\u0131c\u0131n\u0131n anahtar\u0131n\u0131 ve sudo yetkisini d\u00fczeltip ayar\u0131 yeniden uygulay\u0131n.<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Ubuntu 24.04&#8217;te SSH root giri\u015fini kapatma: sudo yetkili kullan\u0131c\u0131 olu\u015fturma, anahtar\u0131 kopyalama, ikinci oturumda deneme, sshd_config.d alt\u0131nda PermitRootLogin no, sshd -t ve systemctl restart ssh.service ile g\u00fcvenli uygulama.<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[79,13],"tags":[],"class_list":["post-2994","post","type-post","status-publish","format-standard","hentry","category-guvenlik-duvari","category-vps-server"],"meta_box":[],"_links":{"self":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2994","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/comments?post=2994"}],"version-history":[{"count":1,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2994\/revisions"}],"predecessor-version":[{"id":3036,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/posts\/2994\/revisions\/3036"}],"wp:attachment":[{"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/media?parent=2994"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/categories?post=2994"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/narhost.com\/destek\/wp-json\/wp\/v2\/tags?post=2994"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}