Ensure sshd PermitUserEnvironment is disabled

보통레벨 1자동aix

설명

The PermitUserEnvironment option allows users to present environment options to the SSH daemon. Permitting users the ability to set environment variables through the SSH daemon could potentially allow users to bypass security controls (e.g. setting an execution path that has SSH executing trojan'd programs) Audit: evaluates the effective configuration from `sshd -T` (Match blocks must be reviewed separately).

점검 방법

감사 방식: 셸 명령

shell

command -v sshd >/dev/null 2>&1 || exit 1; out=$(sshd -T 2>/dev/null) || exit 1; r=compliant; for p in '^permituserenvironment[[:blank:]]+no$'; do printf '%s\n' "$out" | grep -Eiq -- "$p" || r="not matched: $p"; done; echo "$r"

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

Edit the /etc/ssh/sshd_config file to set the parameter: PermitUserEnvironment no Re-cycle the sshd daemon to pick up the configuration changes: stopsrc -s sshd startsrc -s sshd

속성

운영 체제: 모두
태그: aixssh
참고 자료: CIS IBM AIX 7 Benchmark v1.2.0 - 4.6.3.16 Ensure sshd PermitUserEnvironment is disabled

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target aix