The SUSE operating system must not allow automatic logon via SSH.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-217268 | SLES-12-030150 | SV-217268r603262_rule | High |
| Description |
|---|
| Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security. |
| STIG | Date |
|---|---|
| SLES 12 Security Technical Implementation Guide | 2022-09-13 |
Details
| Check Text ( C-18496r369960_chk ) |
|---|
| Verify the SUSE operating system disables automatic logon via SSH. Check that automatic logon via SSH is disabled with the following command: # sudo grep -i "permitemptypasswords" /etc/ssh/sshd_config PermitEmptyPasswords no If "PermitEmptyPasswords" is not set to "no", is missing completely, or is commented out, this is a finding. |
| Fix Text (F-18494r369961_fix) |
|---|
| Configure the SUSE operating system disables automatic logon via SSH. Add or edit the following line in the "/etc/ssh/sshd_config" file: PermitEmptyPasswords no |