openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/metadata/rhel7/RHEL-07-010270.rst
Major Hayden 0637257c60 Add RHEL-07-010270 (ssh - empty password) 
This patch adds the tasks and documentation for RHEL-07-010270.

Implements: blueprint security-rhel7-stig
Change-Id: I6af1d6f188f7244c261c3c847f2056f293023eca
2016-10-31 14:01:15 -05:00

405 B
Raw Blame History

---id: RHEL-07-010270 status: implemented tag: sshd ---

The PermitEmptyPasswords configuration will be set to no in /etc/ssh/sshd_config and sshd will be restarted. This disallows logins over ssh for users with a empty or null password set.

Deployers can opt-out of this change by setting the following Ansible variable:

security_sshd_disallow_empty_password: no