STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5 SSH daemon must disable forwarded remote X connections for interactive users, unless to fulfill documented and validated mission requirements.

DISA Rule

SV-261333r996464_rule

Vulnerability Number

V-261333

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

SLEM-05-255040

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Configure SLEM 5 SSH daemon to disable forwarded X connections for interactive users.

Add or modify the following line in the "/etc/ssh/sshd_config" file:

X11Forwarding no

Check Contents

Verify SLEM 5 SSH daemon remote X forwarded connections for interactive users are disabled with the following command:

> sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\s*x11forwarding'
/etc/ssh/sshd_config:X11Forwarding no

If the "X11Forwarding" keyword is set to "yes" and is not documented with the information system security officer (ISSO) as an operational requirement, is commented out, or the line is missing, this is a finding.

Vulnerability Number

V-261333

Documentable

False

Rule Version

SLEM-05-255040

Severity Override Guidance

Verify SLEM 5 SSH daemon remote X forwarded connections for interactive users are disabled with the following command:

> sudo /usr/sbin/sshd -dd 2>&1 | awk '/filename/ {print $4}' | tr -d '\r' | tr '\n' ' ' | xargs sudo grep -iH '^\s*x11forwarding'
/etc/ssh/sshd_config:X11Forwarding no

If the "X11Forwarding" keyword is set to "yes" and is not documented with the information system security officer (ISSO) as an operational requirement, is commented out, or the line is missing, this is a finding.

Check Content Reference

M

Target Key

5596