Detections
Analytics
ALMA-09-020920 - AlmaLinux OS 9 SSH private host key files must have mode 0600 or less permissive.
Information
If an unauthorized user obtains the private SSH host key file, the host could be impersonated.Solution
Configure the mode of SSH private host key files under "/etc/ssh" to "0600" with the following command:$ chmod 0600 /etc/ssh/ssh_host*key
Restart the SSH daemon for the changes to take effect:
$ systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CL_AlmaLinux_OS_9_V1R7_STIG.zip
Item Details
Audit Name: DISA Cloud Linux AlmaLinux OS 9 STIG v1r7
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-269265r1208312_rule, STIG-ID|ALMA-09-020920, Vuln-ID|V-269265
Plugin: Unix
Control ID: 8e8ff3915de7ab91761b1ab742e5a2048f3680a73c1ac89f6ce899a1f08275fc