Detections
Analytics
UBTU-22-255025 - Ubuntu 22.04 LTS must not allow unattended or automatic login via SSH.
Information
Failure to restrict system access to authenticated users negatively impacts Ubuntu 22.04 LTS security.Solution
Configure the SSH server to not allow unattended or automatic login to the system.Add or modify the following lines in the "/etc/ssh/sshd_config" file:
PermitEmptyPasswords no
PermitUserEnvironment no
Restart SSH for the changes to take effect:
$ sudo systemctl restart ssh
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_22-04_LTS_V2R9_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 22.04 LTS STIG v2r9
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-260526r1208678_rule, STIG-ID|UBTU-22-255025, Vuln-ID|V-260526
Plugin: Unix
Control ID: 13e5370a108fcdeced10f0534d4c4665ba94e1fd8a630f08d326f125e144b0b2