Check: GEN001120
SOLARIS 9 SPARC STIG:
GEN001120
(in version v1 r12)
Title
The system must not permit root logins using remote access programs such as SSH. (Cat II impact)
Discussion
Even though communications are encrypted, an additional layer of security may be gained by extending the policy of not logging directly on as root. In addition, logging in with a user-specific account preserves the audit trail.
Check Content
Fix Text
Edit the configuration file and set the PermitRootLogin option to no.
Additional Identifiers
Rule ID: SV-39811r1_rule
Vulnerability ID: V-1047
Group Title: GEN001120
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000770 |
The organization requires individuals to be authenticated with an individual authenticator when a group authenticator is employed. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| IA-2(5) |
Group Authentication |