Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-1047 | GEN001120 | SV-37156r1_rule | ECPA-1 | Medium |
Description |
---|
Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2016-07-22 |
Check Text ( None ) |
---|
None |
Fix Text (F-31118r1_fix) |
---|
Edit the sshd_config file and set the PermitRootLogin option to "no". |