Detections
Analytics

1.281 OL09-00-002357

Information

OL 9 must not allow a noncertificate trusted host SSH logon to the system.

GROUP ID: V-271719
RULE ID: SV-271719r1091869

SSH trust relationships mean a compromise on one host can allow an attacker to move trivially to other hosts.

Solution

Configure OL 9 to not allow a noncertificate trusted host SSH logon to access the system.

Add or modify the following line in "/etc/ssh/sshd_config" or in a file in "/etc/ssh/sshd_config.d".

HostbasedAuthentication no

Restart the SSH daemon for the settings to take effect:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/27024

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CCI|CCI-000366, Rule-ID|SV-271719r1091869_rule, STIG-ID|OL09-00-002357, Vuln-ID|V-271719

Plugin: Unix

Control ID: f90bcb3aaf66fff523ea03563be06f01d4093045c236c4b8e8c9562258d3f29a