Detections
Analytics

1.322 RHEL-10-700500

Information

RHEL 10 must be configured so that Secure Shell (SSH) public host key files have mode "0644" or less permissive.

GROUP ID: V-281253RULE ID: SV-281253r1184654

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Solution

Configure RHEL 10 SSH public host key files to have mode "0644" or less permissive.

Change the mode of public host key files under "/etc/ssh" to "0644" with the following command:

$ sudo chmod 0644 /etc/ssh/*key.pub

Restart the SSH daemon with the following command for the changes to take effect:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/26403

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-6a., CAT|II, CCI|CCI-002696, Rule-ID|SV-281253r1184654_rule, STIG-ID|RHEL-10-700500, Vuln-ID|V-281253

Plugin: Unix

Control ID: a06f21b9a9ca945f30718893cb2ff7347125bcfa3dd7adb55b7e21ae3bac81b5