The system must not permit root logins using remote access programs such as SSH.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1047 | GEN001120 | SV-38207r1_rule | ECPA-1 | Medium |
| Description |
|---|
| Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2017-01-27 |
Details
| Check Text ( None ) |
|---|
| None |
| Fix Text (F-24426r1_fix) |
|---|
| Edit the configuration file and set the PermitRootLogin option to no. |