The SUSE operating system must not allow users to override SSH environment variables.
An XCCDF Rule
Description
SSH environment options potentially allow users to bypass access restriction in some configurations.
- ID
- SV-217269r991591_rule
- Version
- SLES-12-030151
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the SUSE operating system disables unattended logon via SSH.
Add or edit the following lines in the "/etc/ssh/sshd_config" file:
PermitUserEnvironment no