← Back to SLES 12 Security Technical Implementation Guide

V-217269

CAT II (Medium)

The SUSE operating system must not allow users to override SSH environment variables.

Rule ID

SV-217269r991591_rule

STIG

SLES 12 Security Technical Implementation Guide

Version

V3R2

CCIs

V-99011

Discussion

SSH environment options potentially allow users to bypass access restriction in some configurations.

Check Content

Verify the SUSE operating system disables unattended via SSH.

Check that unattended logon via SSH is disabled with the following command:

# sudo grep -i "permituserenvironment" /etc/ssh/sshd_config

PermitUserEnvironment no

If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding.

Fix Text

Configure the SUSE operating system disables unattended logon via SSH.

Add or edit the following lines in the "/etc/ssh/sshd_config" file:

PermitUserEnvironment no