Detections
Analytics

GEN005536 - The SSH daemon must perform strict mode checking of home directory configuration files.

Information

If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.

Solution

Edit the /etc/sshd/sshd_config file and remove the StrictModes setting or change the value of the StrictModes setting to 'yes'.

See Also

http://iasecontent.disa.mil/stigs/zip/U_STIG_Library_2015_07.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, CAT|II, CCI|CCI-000225, Rule-ID|SV-40720r1_rule, STIG-ID|GEN005536, Vuln-ID|V-22485

Plugin: Unix

Control ID: cfa70f301a37ae50710deb938eb489185d444118576b2449d06f32341afa9881