SSH Hardening

EasyLinux Security15-20 min

The brief

This server's SSH daemon shipped with insecure defaults. Harden /etc/ssh/sshd_config: disable direct root login and disable password authentication (key-only). Grading inspects the config file, the way a STIG check would.

What you'll do

Set PermitRootLogin no in /etc/ssh/sshd_config
Set PasswordAuthentication no

Hands-on lab: you work on a real Linux box in your browser, graded on the machine's actual state.