The SUSE operating system must not allow automatic logon via SSH.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| high | V-217268 | SRG-OS-000480-GPOS-00229 | SLES-12-030150 | SV-217268r991591_rule | 2024-11-25 | 3 |
| Description |
|---|
| Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security. |
| ℹ️ Check |
|---|
| Verify the SUSE operating system disables automatic logon via SSH. Check that automatic logon via SSH is disabled with the following command: # sudo grep -i "permitemptypasswords" /etc/ssh/sshd_config PermitEmptyPasswords no If "PermitEmptyPasswords" is not set to "no", is missing completely, or is commented out, this is a finding. |
| ✔️ Fix |
|---|
| Configure the SUSE operating system disables automatic logon via SSH. Add or edit the following line in the "/etc/ssh/sshd_config" file: PermitEmptyPasswords no |