Prevent root login must be securely configured in /etc/sshd_config.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Associated with IA controls: ECPA-1, COBR-1

SV-38525r1_rule Prevent root login must be securely configured in /etc/sshd_config.

Vulnerability discussion

Prevents logging in as root through SSH. This should be set for all SSH methods of authenticating.

Check content

Open a terminal session and enter the following command. more /etc/sshd_config Ensure the value "PermitRootLogin" is set to "No". If the value "PermitRootLogin" is not set to "No", this is a finding. NOTE: If the line starts with a # sign this is a comment and the command to disable root login would be invalid regardless of the value, this is a finding.

Fix text

Open a terminal session and enter the following command. sudo pico /etc/sshd_config Edit the value "PermitRootLogin" and set it to "No". Save the file.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.