Check SSHD Configuration for Root User Login

check_sshd_root_login.sh

#!/bin/bash
# This script checks if the root user can access SSH server on this machine

FILE="/etc/ssh/sshd_config"

if ! [[ -r $FILE ]]
then
  echo "Unable to read $FILE"
  exit 1
fi

# Take one check all lines
output=`grep PermitRootLogin $FILE `
# Take two - ignore all comments
output=`grep PermitRootLogin $FILE | grep -v '^\s*#' `

# Better alternative is to split the output and analyze second part (awk)
if echo $output | grep -i no
then
  echo "PermitRootLogin is set to no! -- GOOD"
else
  echo "Check $FILE for PermitRootLogin. Current setting is $output"
fi