Detections
Analytics

1.193 SLES-15-040250

Information

The SUSE operating system SSH daemon private host key files must have mode 0640 or less permissive.

GROUP ID: V-235009
RULE ID: SV-235009r991589

If an unauthorized user obtains the private SSH host key file, the host could be impersonated.

Solution

Configure the mode of the SUSE operating system SSH daemon private host key files under "/etc/ssh" to "0640" with the following command:

sudo chmod 0640 /etc/ssh/ssh_host*key

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-235009r991589_rule, STIG-ID|SLES-15-040250, Vuln-ID|V-235009

Plugin: Unix

Control ID: 598382053bfa602cd2cf497a6cfc30f9319b20f55e2e544187975dd9d69236bd