UCF STIG Viewer Logo

The system must not permit root logins using remote access programs such as ssh.


Overview

Finding ID Version Rule ID IA Controls Severity
V-1047 GEN001120 SV-64455r1_rule Medium
Description
Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail.
STIG Date
Oracle Linux 5 Security Technical Implementation Guide 2020-02-25

Details

Check Text ( C-52831r1_chk )
Determine if the SSH daemon is configured to permit root logins.

Procedure:
# grep -v "^#" /etc/ssh/sshd_config | grep -i permitrootlogin

If the PermitRootLogin entry is not found or is not set to "no", this is a finding.
Fix Text (F-55013r1_fix)
Edit the sshd_config file and set the PermitRootLogin option to "no".