Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The system must not permit root logins using remote access programs such as ssh.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1047 | GEN001120 | SV-37156r1_rule | ECPA-1 | Medium |
| Description |
|---|
| Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2015-03-12 |
Details
| Check Text ( C-35864r1_chk ) |
|---|
| Determine if the SSH daemon is configured to permit root logins. Procedure: # grep -v "^#" /etc/ssh/sshd_config | grep -i permitrootlogin If the PermitRootLogin entry is not found or is not set to "no", this is a finding. |
| Fix Text (F-31118r1_fix) |
|---|
| Edit the sshd_config file and set the PermitRootLogin option to "no". |