Profile My skills Saved Collections Edit profile Submit a skill

CIS Ubuntu 14.04 LTS - 5.2.10 Ensure SSH PermitUserEnvironment is disabled

Verify SSH PermitUserEnvironment is set to no to prevent users from setting environment options

cyberstrikeus Updated
Coding & Dev Tools

File contents

5.2.10 Ensure SSH PermitUserEnvironment is disabled (Scored)

Profile Applicability

  • Level 1 - Server
  • Level 1 - Workstation

Description

The PermitUserEnvironment option allows users to present environment options to the ssh daemon.

Rationale

Permitting users the ability to set environment variables through the SSH daemon could potentially allow users to bypass security controls (e.g. setting an execution path that has ssh executing trojan'd programs).

Audit Procedure

Run the following command and verify that output matches:

grep PermitUserEnvironment /etc/ssh/sshd_config

Expected Result

PermitUserEnvironment no

Remediation

Edit the /etc/ssh/sshd_config file to set the parameter as follows:

PermitUserEnvironment no

Default Value

PermitUserEnvironment no

References

  • CIS Controls: 16 - Account Monitoring and Control

Profile

  • Level 1 - Server
  • Level 1 - Workstation

cyberstrikeus/cyberstrike/tree/main/.cyberstrike/skill/CIS_benchmarks/Operating_Systems/Ubuntu/cis-ubuntu-linux-14-04-lts-benchmark-v2/cis-ubuntu1404-v210-5-2-10 commit 0aa8fac4fe

Browse category

Frequently asked questions

npx skillmds@latest add cyberstrikeus/cis-ubuntu-14-04-lts-5-2-10-ensure-ssh-permituserenvironment