diff --git a/tests/security/compliance_comprehensive_test.bats b/tests/security/compliance_comprehensive_test.bats index 84e5115..e69582e 100644 --- a/tests/security/compliance_comprehensive_test.bats +++ b/tests/security/compliance_comprehensive_test.bats @@ -20,3 +20,12 @@ @test "Firewall configured" { grep -q "nftables" /workspace/config/package-lists/knel-football.list.chroot } + +# FR-006: SSH Access - Key-Based Authentication Only +@test "SSH password authentication disabled" { + grep -q "PasswordAuthentication no" /workspace/src/security-hardening.sh +} + +@test "SSH root login disabled" { + grep -q "PermitRootLogin no" /workspace/src/security-hardening.sh +}