Detections
Analytics
OL09-00-002358 - OL 9 must not allow users to override SSH environment variables.
Information
SSH environment options potentially allow users to bypass access restriction in some configurations.Solution
Configure the OL 9 SSH daemon to not allow unattended or automatic logon to the system.Add or edit the following line in the "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d":
PermitUserEnvironment no
Restart the SSH daemon for the setting to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271720r1091872_rule, STIG-ID|OL09-00-002358, Vuln-ID|V-271720
Plugin: Unix
Control ID: 024dccf73079117e8200283c4c718e7d799899c0834c568e1c63c00970958cdd