System stack

You can file an issue about it and ask that it be added.

---

Table of Contents

• System stack

System stack

The SSH protocol is recommended for remote login and remote file transfer. SSH provides confidentiality and integrity for data exchanged between two systems, as well as server authentication, through the use of public key cryptography.

Disable empty passwords

Rationale

Configuring this setting for the SSH daemon provides additional assurance that remote login via SSH will require a password, even in the event of misconfiguration elsewhere.

Solution

Explicitly disallow SSH login from accounts with empty passwords

PermitEmptyPasswords no

^{C2S/CIS: CCE-27471-2 (High)}