diff --git a/controls/sshd_spec.rb b/controls/sshd_spec.rb index 15ecca0..2956143 100644 --- a/controls/sshd_spec.rb +++ b/controls/sshd_spec.rb @@ -207,9 +207,9 @@ control 'sshd-16' do impact 1.0 title 'Server: Use privilege separation' - desc 'UsePrivilegeSeparation is an option, when enabled will allow the OpenSSH server to run a small (necessary) amount of code as root and the of the code in a chroot jail environment. This enables ssh to deal incoming network traffic in an unprivileged child process to avoid privilege escalation by an attacker.' + desc 'UsePrivilegeSeparation is deprecated.' describe sshd_config(sshd_custom_path + '/sshd_config') do - its('UsePrivilegeSeparation') { should eq(sshd_valid_privseparation) } + its('UsePrivilegeSeparation') { should eq nil } end end