Skip to content

Commit d2e1fe0

Browse files
Merge pull request #123 from jeremy-clerc/root_login
Allow prohibit-password as PermitRootLogin value
2 parents 632a1a2 + c41ef69 commit d2e1fe0

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

controls/sshd_spec.rb

+1-1
Original file line numberDiff line numberDiff line change
@@ -103,7 +103,7 @@
103103
title 'Server: Do not permit root-based login or do not allow password and keyboard-interactive authentication'
104104
desc 'Reduce the potential risk to gain full privileges access of the system because of weak password and keyboard-interactive authentication, do not allow logging in as the root user or with password authentication.'
105105
describe sshd_config do
106-
its('PermitRootLogin') { should match(/no|without-password/) }
106+
its('PermitRootLogin') { should match(/no|without-password|prohibit-password/) }
107107
end
108108
end
109109

0 commit comments

Comments
 (0)