diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml new file mode 100644 index 000000000000..9177852a8ae5 --- /dev/null +++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/ansible/shared.yml @@ -0,0 +1,7 @@ +# platform = multi_platform_sle +# reboot = false +# strategy = restrict +# complexity = low +# disruption = low + +{{{ ansible_sshd_set(parameter="ClientAliveCountMax", value="0") }}} diff --git a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml index 90a8b6e564d5..fac9b4597beb 100644 --- a/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml +++ b/linux_os/guide/services/ssh/ssh_server/sshd_set_keepalive/rule.yml @@ -24,6 +24,7 @@ identifiers: cce@rhel7: CCE-27082-7 cce@rhel8: CCE-80907-9 cce@rhcos4: CCE-82464-9 + cce@sle12: CCE-83034-9 references: stigid@ol7: OL07-00-040340 diff --git a/sle12/profiles/stig.profile b/sle12/profiles/stig.profile index 3f00b9553173..e2daaf617f2b 100644 --- a/sle12/profiles/stig.profile +++ b/sle12/profiles/stig.profile @@ -16,6 +16,7 @@ selections: - sshd_do_not_permit_user_env - disable_ctrlaltdel_reboot - sshd_enable_x11_forwarding + - sshd_set_keepalive - gnome_gdm_disable_automatic_login - no_user_host_based_files - auditd_data_disk_full_action