The SUSE operating system must not allow users to override SSH environment variables.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-217269 | SLES-12-030151 | SV-217269r991591_rule | Medium |
| Description |
| SSH environment options potentially allow users to bypass access restriction in some configurations. |
| STIG | Date |
| SLES 12 Security Technical Implementation Guide | 2024-11-25 |
Details
| Check Text (C-18497r369963_chk) |
| Verify the SUSE operating system disables unattended via SSH. Check that unattended logon via SSH is disabled with the following command: # sudo grep -i "permituserenvironment" /etc/ssh/sshd_config PermitUserEnvironment no If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding. |
| Fix Text (F-18495r369964_fix) |
| Configure the SUSE operating system disables unattended logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitUserEnvironment no |