The SUSE operating system must not allow users to override SSH environment variables.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-217269 | SRG-OS-000480-GPOS-00229 | SLES-12-030151 | SV-217269r991591_rule | 2024-11-25 | 3 |
| Description |
|---|
| SSH environment options potentially allow users to bypass access restriction in some configurations. |
| ℹ️ Check |
|---|
| Verify the SUSE operating system disables unattended via SSH. Check that unattended logon via SSH is disabled with the following command: # sudo grep -i "permituserenvironment" /etc/ssh/sshd_config PermitUserEnvironment no If the "PermitUserEnvironment" keyword is not set to "no", is missing completely, or is commented out, this is a finding. |
| ✔️ Fix |
|---|
| Configure the SUSE operating system disables unattended logon via SSH. Add or edit the following lines in the "/etc/ssh/sshd_config" file: PermitUserEnvironment no |