Detections
Analytics

1.282 OL09-00-002358

Information

OL 9 must not allow users to override SSH environment variables.

GROUP ID: V-271720
RULE ID: SV-271720r1091872

SSH environment options potentially allow users to bypass access restriction in some configurations.

Solution

Configure the OL 9 SSH daemon to not allow unattended or automatic logon to the system.

Add or edit the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":

PermitUserEnvironment no

Restart the SSH daemon for the setting to take effect:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271720r1091872_rule, STIG-ID|OL09-00-002358, Vuln-ID|V-271720

Plugin: Unix

Control ID: 0d24fd7a7240c27a034bbe0cbf89e5e0f016082c536e05c24a682e0535e338dc