An XCCDF Group - A logical subset of the XCCDF Benchmark
/etc/ssh/sshd_config
sshd_config(5)
ClientAliveCountMax
ClientAliveInterval
0
ClientAliveInterval * ClientAliveCountMax
.rhosts
HostbasedAuthentication
/etc/ssh/sshd_config.d/00-complianceascode-hardening.conf
HostbasedAuthentication no
PermitEmptyPasswords
PermitEmptyPasswords no
IgnoreRhosts
IgnoreRhosts yes
PermitRootLogin no
AllowTcpForwarding
AllowTcpForwarding no
X11Forwarding
X11Forwarding no
PermitUserEnvironment
PermitUserEnvironment no
UsePAM yes
Banner /etc/issue.net
LoginGraceTime
VERBOSE
LogLevel VERBOSE
MaxAuthTries
MaxSessions
MaxStartups