The Photon operating system must configure sshd to disable X11 forwarding.
An XCCDF Rule
Description
X11 is an older, insecure graphics forwarding protocol. It is not used by Photon and should be disabled as a general best practice to limit attack surface area and communication channels.
- ID
- SV-256549r991589_rule
- Version
- PHTN-30-000080
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/ssh/sshd_config
Ensure the "X11Forwarding" line is uncommented and set to the following: