ALMA-09-020590 - The AlmaLinux OS 9 SSH server configuration file must be owned by root.

Information

Service configuration files enable or disable features of their respective services, which, if configured incorrectly, can lead to insecure and vulnerable configurations. Therefore, service configuration files must be owned by the correct group to prevent unauthorized changes.

Solution

Configure the SSHD config files to be owned by root with the following command:

$ chown root /etc/ssh/sshd_config /etc/ssh/sshd_config.d/*.conf

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R2_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-269262r1050144_rule, STIG-ID|ALMA-09-020590, Vuln-ID|V-269262

Plugin: Unix

Control ID: 2056a459726ebeb403c498234b2b0c10ebee9d2b42372af433b4aa46c1240ce5