Detections
Analytics
GEN001120 - The system must not permit root logins using remote access programs such as SSH.
Information
Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail.Solution
Edit the configuration file and set the PermitRootLogin option to no.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_SPARC_V2R4_STIG.zip
Item Details
Audit Name: DISA STIG Solaris 10 SPARC v2r4
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2(5), CAT|II, CCI|CCI-000770, Rule-ID|SV-226483r603265_rule, STIG-ID|GEN001120, STIG-Legacy|SV-39811, STIG-Legacy|V-1047, Vuln-ID|V-226483
Plugin: Unix
Control ID: 6b78097a1da68af7630d78edf3cc5881574b0f53b33637b23a5a95bc3e371c94