Detections
Analytics

GEN005521 - The SSH daemon must restrict login ability to specific users and/or groups.

Information

Restricting SSH logins to a limited group of users, such as system administrators, prevents password-guessing and other SSH attacks from reaching system accounts and other accounts not authorized for SSH access.

Solution

Edit the SSH daemon configuration and add an AllowGroups directive.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SOL_10_x86_V2R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-227899r603266_rule, STIG-ID|GEN005521, STIG-Legacy|SV-26763, STIG-Legacy|V-22470, Vuln-ID|V-227899

Plugin: Unix

Control ID: df67a14b25f280921e0017e53eda08449357e250a1a57210041421887b8c2908