Detections
Analytics

1.163 ALMA-09-021030

Information

AlmaLinux OS 9 SSH public host key files must have mode 0644 or less permissive.

GROUP ID: V-269266
RULE ID: SV-269266r1050148

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Whilst public keys are publicly readable, they should not be writeable by nonowners.

Solution

Change the mode of public host key files under "/etc/ssh" to "0644" with the following command:

$ chmod 0644 /etc/ssh/*key.pub

Restart the SSH daemon for the changes to take effect:

$ systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/27039

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-269266r1050148_rule, STIG-ID|ALMA-09-021030, Vuln-ID|V-269266

Plugin: Unix

Control ID: ec37e727733e3765af2d4241aa3edc0ab65b9cb8b844726feb6903d24bb1e44c