Detections
Analytics

1.192 SLES-15-040240

Information

The SUSE operating system SSH daemon public host key files must have mode 0644 or less permissive.

GROUP ID: V-235008
RULE ID: SV-235008r991589

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Solution

Configure the SUSE operating system SSH daemon public host key files have mode "0644" or less permissive.

Note : SSH public key files may be found in other directories on the system depending on the installation.

Change the mode of public host key files under "/etc/ssh" to "0644" with the following command:

sudo chmod 0644 /etc/ssh/ssh_host*key.pub

See Also

https://workbench.cisecurity.org/benchmarks/23779

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-235008r991589_rule, STIG-ID|SLES-15-040240, Vuln-ID|V-235008

Plugin: Unix

Control ID: 56e842064da6b1a6e3d76b4be6311bacd67c89276f9e559e94348a21802a1570