Detections
Analytics
UBTU-22-255025 - Ubuntu 22.04 LTS must not allow unattended or automatic login via SSH.
Information
Failure to restrict system access to authenticated users negatively impacts Ubuntu 22.04 LTS security.Solution
Configure the SSH server to not allow unattended or automatic login to the system.Add or modify the following lines in the "/etc/ssh/sshd_config" file:
PermitEmptyPasswords no
PermitUserEnvironment no
Restart the SSH daemon for the changes to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_22-04_LTS_V2R8_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 22.04 LTS STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-260526r991591_rule, STIG-ID|UBTU-22-255025, Vuln-ID|V-260526
Plugin: Unix
Control ID: 7348f3a9bfe5c10e78672b03d96789c6d60a2e0dab6a96f117d30f05684a6fd4