Detections
Analytics

1.159 ALMA-09-020590

Information

The AlmaLinux OS 9 SSH server configuration file must be owned by root.

GROUP ID: V-269262
RULE ID: SV-269262r1050144

Service configuration files enable or disable features of their respective services, which, if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.

Solution

Configure the SSHD config files to be owned by root with the following command:

$ chown root /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269262r1050144_rule, STIG-ID|ALMA-09-020590, Vuln-ID|V-269262

Plugin: Unix

Control ID: 4eb04682e4e20d5efcc2bc18fa2d909327bf99adfe23f454307ac5f89fb9c200