I've disabled root SSH login and I wanted to change my root password for a strong one.
I was logged in with an admin user and used the following:
sudo passwd root
I expected it to ask for my root password but it asked for my admin password and then I was able to change the root password.
Is that normal?
Does that mean that someone who can "hack" the admin user can change the root password without even knowing it?
I'm using Debian9 with VestaCP.