Check: GEN001120
AIX 6.1 SECURITY TECHNICAL IMPLEMENTATION GUIDE:
GEN001120
(in versions v1 r14 through v1 r10)
Title
The system must not permit root logins using remote access programs, such as ssh. (Cat II impact)
Discussion
Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail.
Check Content
Determine if the SSH daemon is configured to permit root logins. Procedure: # find / -name sshd_config -ls # grep -v "^#" <sshd_config path and file> | grep -i permitrootlogin If the PermitRootLogin entry is not found or is not set to no, this is a finding.
Fix Text
Edit the /etc/ssh/sshd_config file and set the PermitRootLogin option to no and refresh sshd. #kill -1 <pid of sshd>
Additional Identifiers
Rule ID: SV-38684r1_rule
Vulnerability ID: V-1047
Group Title: GEN001120
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000770 |
The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed. |
Controls
Number | Title |
---|---|
IA-2 (5) |
Group Authentication |