Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-99011 | SLES-12-030151 | SV-108115r3_rule | Medium |
Description |
---|
Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security. |
STIG | Date |
---|---|
SLES 12 Security Technical Implementation Guide | 2020-06-30 |
Check Text ( C-97851r1_chk ) |
---|
Verify the SUSE operating system disables unattended via SSH. Check that unattended logon via SSH is disabled with the following command: # sudo grep -i "permituserenvironment" /etc/ssh/sshd_config PermitUserEnvironment no If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding. |
Fix Text (F-104687r1_fix) |
---|
Configure the SUSE operating system disables unattended logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitUserEnvironment no |