Detections
Analytics

1.89 OL08-00-010500

Information

The OL 8 SSH daemon must perform strict mode checking of home directory configuration files.

GROUP ID: V-248603
RULE ID: SV-248603r991589

If other users have access to modify user-specific SSH configuration files, they may be able to log on to the system as another user.

Solution

Configure SSH to perform strict mode checking of home directory configuration files.

Uncomment the "StrictModes" keyword in "/etc/ssh/sshd_config" and set the value to "yes":

StrictModes yes

The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248603r991589_rule, STIG-ID|OL08-00-010500, Vuln-ID|V-248603

Plugin: Unix

Control ID: e5e11df1fb784288cc9f4433c5e104cfa167ce71bee61f738763d6cba110c4ae