Detections
Analytics

1.234 RHEL-09-255160

Information

RHEL 9 SSH daemon must perform strict mode checking of home directory configuration files.

GROUP ID: V-258008
RULE ID: SV-258008r1045075

If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.

Solution

Configure the SSH daemon to perform strict mode checking of home directory configuration files.

Add the following line to "/etc/ssh/sshd_config" or to a file in "/etc/ssh/sshd_config.d", or uncomment the line and set the value to "yes":

StrictModes yes

The SSH service must be restarted for changes to take effect:

$ sudo systemctl restart sshd.service

See Also

https://workbench.cisecurity.org/benchmarks/22008

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258008r1045075_rule, STIG-ID|RHEL-09-255160, Vuln-ID|V-258008

Plugin: Unix

Control ID: 0a2e952ac1c2c6897ba8ad9c6b5e68e0d245aee377ac0ae0e39d784aac90a272