mediumaccess-controlverified ✓rollback-safe
Ensure sshd PermitUserEnvironment is disabled
ssh-disable-user-environment · RHEL ≥ 8, UBUNTU ≥ 22 · 2 impls
Description
The sshd PermitUserEnvironment directive must be properly configured.
Rationale
Improper SSH PermitUserEnvironment configuration could weaken the security of remote access to the system.
Check → Remediate
Checksshd_effective_config
- key:
- permituserenvironment
- expected:
- no
Remediateconfig_set
- path:
- /etc/ssh/sshd_config
- key:
- PermitUserEnvironment
- value:
- no
- separator:
- reload:
- sshd
Framework references
CIS
rhel9 5.1.21rhel10 5.1.21rhel8 5.1.23ubuntu24 5.1.21ubuntu22 5.1.21
STIG
V-281267 / RHEL-10-700640V-230330 / RHEL-08-010830V-257993 / RHEL-09-255085V-270717 / UBTU-24-300031V-260526 / UBTU-22-255025
NIST 800-53
AC-17SC-8CM-6
Live verification
rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#ssh#sshd#access-control