Detections
Analytics

6.5.9 Host SSH daemon, if enabled, must disable stream local forwarding

Information

Disabling stream local forwarding on the SSH daemon ensures that no Unix domain sockets are forwarded, thus enforcing a security boundary. This measure aids in maintaining the integrity and confidentiality of the system.

Disabling stream local forwarding helps in preventing potential misuse of Unix domain sockets which can be a vector for certain types of attacks or data leaks.

Solution

To remediate this recommendation, set AllowStreamLocalForwarding no, restart SSH if authorized, and verify stream-local forwarding cannot be established.

Impact:

There is no functional impact reported, indicating that disabling stream local forwarding is a safe measure towards enhancing system security without affecting operations.

See Also

https://workbench.cisecurity.org/benchmarks/28124

Item Details

Category: CONFIGURATION MANAGEMENT, MAINTENANCE

References: 800-53|CM-7, 800-53|MA-4, CSCv7|5.1

Plugin: Unix

Control ID: 7922fe1c109c4bb0c805538bba5ef0acbd4f3cef089a7391499cf53af7251035