Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-38613 | RHEL-06-000237 | SV-50414r1_rule | Medium |
Description |
---|
Permitting direct root login reduces auditable information about who ran privileged commands on the system and also allows direct attack attempts on root's password. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 6 Security Technical Implementation Guide | 2017-04-28 |
Check Text ( None ) |
---|
None |
Fix Text (F-43561r1_fix) |
---|
The root user should never be allowed to log in to a system directly over a network. To disable root login via SSH, add or correct the following line in "/etc/ssh/sshd_config": PermitRootLogin no |