The SUSE operating system must not allow unattended logon via SSH.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-99011 | SLES-12-030151 | SV-108115r3_rule | Medium |
| Description |
|---|
| Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security. |
| STIG | Date |
|---|---|
| SLES 12 Security Technical Implementation Guide | 2020-06-30 |
Details
| Check Text ( C-97851r1_chk ) |
|---|
| Verify the SUSE operating system disables unattended via SSH. Check that unattended logon via SSH is disabled with the following command: # sudo grep -i "permituserenvironment" /etc/ssh/sshd_config PermitUserEnvironment no If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding. |
| Fix Text (F-104687r1_fix) |
|---|
| Configure the SUSE operating system disables unattended logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitUserEnvironment no |