Detections
Analytics

1.214 SLES-15-040440

Information

The SUSE operating system must not allow unattended or automatic logon via SSH.

GROUP ID: V-235032
RULE ID: SV-235032r991591

Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security.

Solution

Configure the SUSE operating system disables unattended or automatic logon via SSH.

Add or edit the following lines in the "/etc/ssh/sshd_config" file:

PermitEmptyPasswords no
PermitUserEnvironment no

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-235032r991591_rule, STIG-ID|SLES-15-040440, Vuln-ID|V-235032

Plugin: Unix

Control ID: ccfee718ebccc07d3c6f3d13686a99abcd9aaefdb7845bde48669bab03d59f63