-
Bug
-
Resolution: Done
-
Undefined
-
rhel-9.0.0
-
None
-
Moderate
-
rhel-sst-security-compliance
-
ssg_security
-
None
-
False
-
-
No
-
None
-
None
-
None
-
Release Note Not Required
-
-
Unspecified
-
None
Description of problem:
Anaconda added option to "Allow root SSH login with password" into GUI to circumvent default change in the SSH. As the `scap-security-guide` profiles in many cases require `PermitRootLogin no`, we are directly countering this option. Given the paradigm that whatever is configured by Anaconda is integrated as a special Anaconda-based check, we need it as well.
Version-Release number of selected component (if applicable):
2.0.0-8.el9
How reproducible:
reliably
Steps to Reproduce:
1. begin GUI installation of RHEL9
2. select OSPP profile
3. create root password, tick "allow root ssh login with password"
4. start installation
5. finish installation
Actual results:
no issue is encountered, /etc/ssh/sshd_config contains line
PermitRootLogin no
Expected results:
Installation won't start, as there's conflict of requirements
Additional info:
Anaconda team plans to add kickstart support via Bug 2033849 into 9.1