SV-270708r1208697_rule
V-270708
SRG-OS-000480-GPOS-00227
UBTU-24-300022
CAT I
10
Edit the "/etc/ssh/sshd_config" file to uncomment or add the line for the "X11Forwarding" keyword and set its value to "no" (this file may be named differently or be in a different location if using a version of SSH that is provided by a third-party vendor):
X11Forwarding no
Restart SSH for the changes to take effect:
$ sudo systemctl restart ssh
Verify that X11Forwarding is disabled with the following command:
$ sudo grep -ir x11forwarding /etc/ssh/sshd_config* | grep -v "^#"
X11Forwarding no
If the "X11Forwarding" keyword is set to "yes" and is not documented with the information system security officer (ISSO) as an operational requirement, is missing, or multiple conflicting results are returned, this is a finding.
V-270708
False
UBTU-24-300022
Verify that X11Forwarding is disabled with the following command:
$ sudo grep -ir x11forwarding /etc/ssh/sshd_config* | grep -v "^#"
X11Forwarding no
If the "X11Forwarding" keyword is set to "yes" and is not documented with the information system security officer (ISSO) as an operational requirement, is missing, or multiple conflicting results are returned, this is a finding.
M
5673