Detections
Analytics

5.3.10 Ensure SSH IgnoreRhosts is enabled

Information

The IgnoreRhosts parameter specifies that .rhosts and .shosts files will not be used in RhostsRSAAuthentication or HostbasedAuthentication.

Setting this parameter forces users to enter a password when authenticating with ssh.

Solution

Edit the /etc/ssh/sshd_config file to set the parameter as follows:

IgnoreRhosts yes

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, CSCv7|9.2, Rule-ID|SV-204590r603261_rule, STIG-ID|RHEL-07-040350, Vuln-ID|V-204590

Plugin: Unix

Control ID: 540e85ed1bd6e0fce7d121dfed0b11ad49de9885f4014ce81971c60059af53e9