Detections
Analytics

4.2.1 Ensure permissions on /etc/ssh/sshd_config are configured

Information

The file /etc/ssh/sshd_config contains configuration specifications for sshd.

Configuration specifications for sshd must be protected from unauthorized changes by non-privileged users.

Solution

Run the following script to set ownership and permissions on /etc/ssh/sshd_config :

# chmod u-x,og-rwx /etc/ssh/sshd_config
# chown root:wheel /etc/ssh/sshd_config

See Also

https://workbench.cisecurity.org/benchmarks/19044

Item Details

Category: ACCESS CONTROL, MEDIA PROTECTION

References: 800-53|AC-3, 800-53|AC-5, 800-53|AC-6, 800-53|MP-2, CSCv7|14.6

Plugin: Unix

Control ID: 299263aa09635984efa26ff8b50db9e94e1981784db34fa4254a4174ce069f94