vetkit.sshd.auth.permit-root-login
sshd allows direct root logins with a password or key (PermitRootLogin yes). Attackers can brute-force or reuse credentials directly against the most privileged account.
Last updated:
Suite: Security
regex
sshd allows direct root logins with a password or key (PermitRootLogin yes). Attackers can brute-force or reuse credentials directly against the most privileged account.
Category: SECURITY · Engine rule severity: WARNING
How to fix it
Set PermitRootLogin no (or prohibit-password) and use sudo from named accounts.
References
Source: packages/engine/rules/sast/config.yml.
Generated from shipped rule definitions at build time. Matching is a review signal, not proof of exploitability. “generic” denotes text matching, not complete language or framework coverage. Runtime configuration and available tools affect whether a rule runs.