Detections
Analytics

4.2.1 Ensure permissions on /etc/ssh/sshd_config are configured

Information

The /etc/ssh/sshd_config file contains configuration specifications for sshd . The command below sets the owner and group of the file to root.

The /etc/ssh/sshd_config file needs to be protected from unauthorized changes by non-privileged users.

Solution

Run the following commands to set ownership and permissions on /etc/ssh/sshd_config :

# chown root:root /etc/ssh/sshd_config
# chmod u-x,go-rwx /etc/ssh/sshd_config

See Also

https://workbench.cisecurity.org/benchmarks/12705

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: 53e8d0b6cb615b7caef86a1efde445a7cefb90fbef220f5f33642b5e6789ecbe