UCF STIG Viewer Logo

OSX00180-SSH must not allow empty passwords.


Overview

Finding ID Version Rule ID IA Controls Severity
V-25276 OSX00180 M6 SV-40699r1_rule ECSC-1 High
Description
Denies access to accounts without passwords. This should be set for all SSH methods of authenticating.
STIG Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide 2013-04-09

Details

Check Text ( C-39426r1_chk )
Open a terminal session and enter the command.

more /etc/sshd_config

If the value of PermitEmptyPasswords is set to Yes, this is a finding. If the PermitEmptyPasswords option is not set, this is not a finding.
Fix Text (F-34555r1_fix)
Open a terminal session and edit the following file.

/etc/sshd_config

Set the value of PermitEmptyPasswords to No.