← Rules Catalog
mediumaccess-controlverified rollback-safe

Ensure sshd PermitUserEnvironment is disabled

ssh-disable-user-environment · RHEL ≥ 8, UBUNTU ≥ 22 · 2 impls

Description

The sshd PermitUserEnvironment directive must be properly configured.

Rationale

Improper SSH PermitUserEnvironment configuration could weaken the security of remote access to the system.

Check → Remediate

Checksshd_effective_config
key:
permituserenvironment
expected:
no
Remediateconfig_set
path:
/etc/ssh/sshd_config
key:
PermitUserEnvironment
value:
no
separator:
reload:
sshd

Framework references

CIS

rhel9 5.1.21rhel10 5.1.21rhel8 5.1.23ubuntu24 5.1.21ubuntu22 5.1.21

STIG

V-281267 / RHEL-10-700640V-230330 / RHEL-08-010830V-257993 / RHEL-09-255085V-270717 / UBTU-24-300031V-260526 / UBTU-22-255025

NIST 800-53

AC-17SC-8CM-6

Live verification

rhel10:checkrhel8:checkrhel9:checkubuntu22:checkubuntu24:checkubuntu26:check
#ssh#sshd#access-control