OL 8 must not allow users to override SSH environment variables.

An XCCDF Rule

Description

SSH environment options potentially allow users to bypass access restriction in some configurations.

ID: SV-248650r991591_rule
Version: OL08-00-010830
Severity: High
References: CCI-000366
Updated: about 2 months ago

Remediation Templates

Configure OL 8 to allow the SSH daemon to not allow unattended or automatic login to the system. 
 
Add or edit the following line in the "/etc/ssh/sshd_config" file: 
 
PermitUserEnvironment no 
 The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command: 
 
$ sudo systemctl restart sshd.service