The Ubuntu operating system must not allow unattended or automatic login via SSH.
An XCCDF Rule
Description
Failure to restrict system access to authenticated users negatively impacts Ubuntu operating system security.
- ID
- SV-238218r991591_rule
- Version
- UBTU-20-010047
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the Ubuntu operating system to allow the SSH daemon to not allow unattended or automatic login to the system.
Add or edit the following lines in the "/etc/ssh/sshd_config" file:
PermitEmptyPasswords no
PermitUserEnvironment no