Enable Use of Privilege Separation
An XCCDF Rule
Description
When enabled, SSH will create an unprivileged child process that
has the privilege of the authenticated user. To enable privilege separation in
SSH, add or correct the following line in the /etc/ssh/sshd_config file:
UsePrivilegeSeparation
Rationale
SSH daemon privilege separation causes the SSH process to drop root privileges when not needed which would decrease the impact of software vulnerabilities in the unprivileged section.
- ID
- xccdf_org.ssgproject.content_rule_sshd_use_priv_separation
- Severity
- Medium
- References
- Updated