Detections
Analytics
UBTU-16-030251 - The Ubuntu operating system must not allow users to override SSH environment variables.
Information
Failure to restrict system access to authenticated users negatively impacts Ubuntu operating system security.Solution
Configure the operating system to not allow users to override environment variables to the SSH daemon.Edit the '/etc/ssh/sshd_config' file to uncomment or add the line for 'PermitUserEnvironment' keyword and set the value to 'no':
PermitUserEnvironment no
The SSH service must be restarted for changes to take effect:
# sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215127r610931_rule, STIG-ID|UBTU-16-030251, STIG-Legacy|SV-108093, STIG-Legacy|V-98989, Vuln-ID|V-215127
Plugin: Unix
Control ID: 43eed65723cfa78e975f50314f5dbe28d89baaf2d0f3abe745e5bf90a2dfa51a