Detections
Analytics

1.155 RHEL-10-400340

Information

RHEL 10 must enforce mode "0600" or less permissive for Secure Shell (SSH) private host key files.

GROUP ID: V-281085
RULE ID: SV-281085r1195409

If an unauthorized user obtains the private SSH host key file, the host could be impersonated.

Solution

Configure RHEL 10 to enforce mode "0600" for SSH private host key files with the following command:

$ sudo chmod 0600 /etc/ssh/ssh_host*key

Restart the SSH daemon for the changes to take effect:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-3, CAT|II, CCI|CCI-000213, Rule-ID|SV-281085r1195409_rule, STIG-ID|RHEL-10-400340, Vuln-ID|V-281085

Plugin: Unix

Control ID: 04ef242bcb4705a74754ba5e6cd859b056b1d2594245ace6c07ef9dd679859da