Detections
Analytics
UBTU-24-300031 - Ubuntu 24.04 LTS must not allow unattended or automatic login via SSH.
Information
Failure to restrict system access to authenticated users negatively impacts Ubuntu 24.04 LTS security.Solution
Configure Ubuntu 24.04 LTS to allow the SSH daemon to not allow unattended or automatic login to the system.Add or edit the following lines in the "/etc/ssh/sshd_config" file:
PermitEmptyPasswords no
PermitUserEnvironment no
Restart the SSH daemon for the changes to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_24-04_LTS_V1R5_STIG.zip
Item Details
Audit Name: DISA Canonical Ubuntu 24.04 LTS STIG v1r5
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|I, CCI|CCI-000366, Rule-ID|SV-270717r1067177_rule, STIG-ID|UBTU-24-300031, Vuln-ID|V-270717
Plugin: Unix
Control ID: a6346915618614fa64665f387be56b91c4e87f90f2f3b07dd659f63a9df6ed47