The SUSE operating system SSH daemon must encrypt forwarded remote X connections for interactive users.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-77473	SLES-12-030260	SV-92169r1_rule		High

Description
Open X displays allow an attacker to capture keystrokes and execute commands remotely.

STIG	Date
SLES 12 Security Technical Implementation Guide	2020-06-30

Details

Check Text ( C-77033r1_chk )
Verify the SUSE operating system SSH daemon remote X forwarded connections for interactive users are encrypted. Check that SSH remote X forwarded connections are encrypted with the following command: # sudo grep -i x11forwarding /etc/ssh/sshd_config X11Forwarding yes If the "X11Forwarding" keyword is set to "no", is missing, or is commented out, this is a finding.

Fix Text (F-84115r1_fix)
Configure the SUSE operating system SSH daemon to encrypt forwarded X connections for interactive users. Edit the "/etc/ssh/sshd_config" file to uncomment or add the line for the "X11Forwarding" keyword and set its value to "yes" (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor): X11Forwarding yes