The Photon operating system must configure sshd to disable environment processing.

Enabling environment processing may enable users to bypass access restrictions in some configurations and must therefore be disabled.

At the command line, run the following command:

#sshd -T|&grep -i PermitUserEnvironment

Expected result:

PermitUserEnvironment no

If the output does not match the expected result, this is a finding.

Navigate to and open:

/etc/ssh/sshd_config

Ensure the "PermitUserEnvironment" line is uncommented and set to the following:

PermitUserEnvironment no

At the command line, run the following command:

# systemctl restart sshd.service