The system must not permit root logins using remote access programs such as ssh.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-1047 | GEN001120 | SV-37156r1_rule | ECPA-1 | Medium |
| Description |
|---|
| Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail. |
| STIG | Date |
|---|---|
| Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2017-03-01 |
Details
| Check Text ( C-35864r1_chk ) |
|---|
| Determine if the SSH daemon is configured to permit root logins. Procedure: # grep -v "^#" /etc/ssh/sshd_config | grep -i permitrootlogin If the PermitRootLogin entry is not found or is not set to "no", this is a finding. |
| Fix Text (F-31118r1_fix) |
|---|
| Edit the sshd_config file and set the PermitRootLogin option to "no". |