The Photon operating system must configure Secure Shell (SSH) to disable user environment processing.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| high | V-258871 | SRG-OS-000480-GPOS-00229 | PHTN-40-000208 | SV-258871r991591_rule | 2024-07-11 | 2 |
Description
Enabling user environment processing may enable users to bypass access restrictions in some configurations and must therefore be disabled.
ℹ️ Check
At the command line, run the following command to verify the running configuration of sshd:
# sshd -T|&grep -i PermitUserEnvironment
Example result:
permituserenvironment no
If "PermitUserEnvironment" is not set to "no", this is a finding.
✔️ Fix
Navigate to and open:
/etc/ssh/sshd_config
Ensure the "PermitUserEnvironment" line is uncommented and set to the following:
PermitUserEnvironment no
At the command line, run the following command:
# systemctl restart sshd.service