Prevent root login must be securely configured in /etc/sshd_config.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-25273	OSX00165 M6	SV-38525r1_rule	COBR-1 ECPA-1	Medium

Description
Prevents logging in as root through SSH. This should be set for all SSH methods of authenticating.

STIG	Date
MAC OSX 10.6 Workstation Security Technical Implementation Guide Draft	2013-01-10

Details

Check Text ( C-37738r1_chk )
Open a terminal session and enter the following command. more /etc/sshd_config Ensure the value "PermitRootLogin" is set to "No". If the value "PermitRootLogin" is not set to "No", this is a finding. NOTE: If the line starts with a # sign this is a comment and the command to disable root login would be invalid regardless of the value, this is a finding.

Fix Text (F-32982r1_fix)
Open a terminal session and enter the following command. sudo pico /etc/sshd_config Edit the value "PermitRootLogin" and set it to "No". Save the file.