The SUSE operating system must not allow unattended or automatic logon via SSH.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-235032	SLES-15-040440	SV-235032r991591_rule		High

Description
Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security.

STIG	Date
SUSE Linux Enterprise Server 15 Security Technical Implementation Guide	2024-05-30

Details

Check Text ( C-38220r951647_chk )
Verify the SUSE operating system disables unattended or automatic logon via SSH. Check that unattended or automatic logon via SSH is disabled with the following command: > sudo /usr/sbin/sshd -dd 2>&1 \| awk '/filename/ {print $4}' \| tr -d '\r' \| tr '\n' ' ' \| xargs sudo grep -iEH '^\s(permit(.?)(passwords\|environment))' PermitEmptyPasswords no PermitUserEnvironment no If "PermitEmptyPasswords" or "PermitUserEnvironment" keywords are not set to "no", are missing completely, or are commented out, this is a finding.

Check Text ( C-38220r951647_chk )

Verify the SUSE operating system disables unattended or automatic logon via SSH.

Check that unattended or automatic logon via SSH is disabled with the following command:

> sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iEH '^\s*(permit(.*?)(passwords|environment))'

PermitEmptyPasswords no
PermitUserEnvironment no

If "PermitEmptyPasswords" or "PermitUserEnvironment" keywords are not set to "no", are missing completely, or are commented out, this is a finding.

Fix Text (F-38183r619366_fix)
Configure the SUSE operating system disables unattended or automatic logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitEmptyPasswords no PermitUserEnvironment no