The SUSE operating system must not allow unattended or automatic logon via SSH.
An XCCDF Rule
Description
Failure to restrict system access via SSH to authenticated users negatively impacts SUSE operating system security.
- ID
- SV-235032r991591_rule
- Version
- SLES-15-040440
- Severity
- High
- References
- Updated
Remediation Templates
A Manual Procedure
Configure the SUSE operating system disables unattended or automatic logon via SSH.
Add or edit the following lines in the "/etc/ssh/sshd_config" file:
PermitEmptyPasswords no
PermitUserEnvironment no