Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The SUSE operating system must not allow users to override SSH environment variables.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-217269 | SLES-12-030151 | SV-217269r646747_rule | Medium |
| Description |
|---|
| SSH environment options potentially allow users to bypass access restriction in some configurations. |
| STIG | Date |
|---|---|
| SLES 12 Security Technical Implementation Guide | 2021-11-30 |
Details
| Check Text ( C-18497r369963_chk ) |
|---|
| Verify the SUSE operating system disables unattended via SSH. Check that unattended logon via SSH is disabled with the following command: # sudo grep -i "permituserenvironment" /etc/ssh/sshd_config PermitUserEnvironment no If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding. |
| Fix Text (F-18495r369964_fix) |
|---|
| Configure the SUSE operating system disables unattended logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitUserEnvironment no |