← Back to SUSE Linux Enterprise Server 12 Security Technical Implementation Guide

V-217268

CAT I (High)

The SUSE operating system must not allow automatic logon via SSH.

Rule ID

SV-217268r991591_rule

STIG

SUSE Linux Enterprise Server 12 Security Technical Implementation Guide

Version

V3R5

CCIs

CCI-000366

Discussion

Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security.

Check Content

Verify the SUSE operating system disables automatic logon via SSH.

Check that automatic logon via SSH is disabled with the following command:

# sudo grep -i "permitemptypasswords" /etc/ssh/sshd_config

PermitEmptyPasswords no

If "PermitEmptyPasswords" is not set to "no", is missing completely, or is commented out, this is a finding.

Fix Text

Configure the SUSE operating system disables automatic logon via SSH.

Add or edit the following line in the "/etc/ssh/sshd_config" file:

PermitEmptyPasswords no