I know it's possible to disallow
root logins via ssh, and that it is a Good Idea™ to disallow
root to ever login via ssh (preferring instead to use
sudo or similar).
Is it possible to allow
root to login only using keys, but to also allow
su - to work from the commandline?
When I have disallowed
root logins in the past, it has also killed the ability to do
su - from another user.
If this is possible, how can I accomplish it?