5.2.10 Ensure SSH PermitEmptyPasswords is disabled

Information

The PermitEmptyPasswords parameter specifies if the SSH server allows login to accounts with empty password strings.

Rationale:

Disallowing remote shell access to accounts that have an empty password reduces the probability of unauthorized access to the system

Solution

Edit the /etc/ssh/sshd_config file to set the parameter as follows:

PermitEmptyPasswords no

Default Value:

PermitEmptyPasswords no

See Also

https://workbench.cisecurity.org/files/2920

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-5, CSCv7|16.3

Plugin: Unix

Control ID: d02327a7e2e072193b2f2ffe6e9fd6b29623cb71255a8666daa979e4c9c7d816