The SSH daemon must limit connections to a single session.

From SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Associated with: CCI-000054

SV-46097r1_rule The SSH daemon must limit connections to a single session.

Vulnerability discussion

The SSH protocol has the ability to provide multiple sessions over a single connection without reauthentication. A compromised client could use this feature to establish additional sessions to a system without consent or knowledge of the user.Alternate per-connection session limits may be documented if needed for a valid mission requirement. Greater limits are expected to be necessary in situations where TCP or X11 forwarding are used.

Check content

Check the SSH daemon configuration for the MaxSessions setting. # grep -i MaxSessions /etc/ssh/sshd_config | grep -v '^#' If the setting is not present, or not set to "1", this is a finding.

Fix text

Edit the SSH daemon configuration and add or edit the "MaxSessions" setting value to "1".

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.