Detections
Analytics
UBTU-16-030340 - The SSH daemon must use privilege separation.
Information
SSH daemon privilege separation causes the SSH process to drop root privileges when not needed, which would decrease the impact of software vulnerabilities in the unprivileged section.Solution
Configure SSH to use privilege separation. Uncomment the 'UsePrivilegeSeparation' keyword in '/etc/ssh/sshd_config' and set the value to 'yes':UsePrivilegeSeparation yes
The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:
# sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215135r610931_rule, STIG-ID|UBTU-16-030340, STIG-Legacy|SV-90529, STIG-Legacy|V-75849, Vuln-ID|V-215135
Plugin: Unix
Control ID: c20235f72af9c235ad4d06ed8a6f24860667284701dee8c66b3424683920d872