STIGQter: STIG Summary: Cloud Linux AlmaLinux OS 9 Security Technical Implementation Guide Version: 1 Release: 7 Benchmark Date: 01 Jul 2026:

AlmaLinux OS 9 must not permit direct logons to the root account using remote access via SSH.

DISA Rule

SV-269376r1050259_rule

Vulnerability Number

V-269376

Group Title

SRG-OS-000109-GPOS-00056

Rule Version

ALMA-09-034780

Severity

CAT II

CCI(s)

• CCI-004045 - Require users to be individually authenticated before granting access to the shared accounts or resources.

Weight

10

Fix Recommendation

To configure the system to prevent users from logging on directly as root over SSH, add or modify the following line in "/etc/ssh/sshd_config":

PermitRootLogin no

Alternatively, add the setting to an include file if the line "Include /etc/ssh/sshd_config.d/*.conf" is found at the top of the "/etc/ssh/sshd_config" file:

$ echo "PermitRootLogin no" > /etc/ssh/sshd_config.d/root.conf

Restart the SSH daemon for the settings to take effect:

$ systemctl restart sshd.service

Check Contents

Verify AlmaLinux OS 9 prevents users from logging on directly as "root" over SSH with the following command:

$ sshd -T |grep -I permitrootlogin

permitrootlogin no

If the "PermitRootLogin" keyword is set to "yes" or "without-password", this is a finding.

Vulnerability Number

V-269376

Documentable

False

Rule Version

ALMA-09-034780

Severity Override Guidance

Verify AlmaLinux OS 9 prevents users from logging on directly as "root" over SSH with the following command:

$ sshd -T |grep -I permitrootlogin

permitrootlogin no

If the "PermitRootLogin" keyword is set to "yes" or "without-password", this is a finding.

Check Content Reference

M

Target Key

5664