Detections
Analytics
OL08-00-010490 - The OL 8 SSH private host key files must have mode "0600" or less permissive.
Information
If an unauthorized user obtains the private SSH host key file, the host could be impersonated.Solution
Configure the mode of SSH private host key files under "/etc/ssh" to "0600" with the following command:$ sudo chmod 0600 /etc/ssh/ssh_host*key
The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R9_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 8 STIG v2r9
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248602r1208711_rule, STIG-ID|OL08-00-010490, Vuln-ID|V-248602
Plugin: Unix
Control ID: 9e4aabbf3d7e0a9660056c7995ea781d881bdb2bc144432454fa8dca149b3a19