Detections
Analytics
OL09-00-002502 - OL 9 SSH private host key files must have mode 0600 or less permissive.
Information
If an unauthorized user obtains the private SSH host key file, the host could be impersonated.Solution
Configure the mode of SSH private host key files under "/etc/ssh" to "0600" with the following command:$ sudo chmod 0600 /etc/ssh/ssh_host*key
Restart the SSH daemon for the changes to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_9_V1R6_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 9 STIG v1r6
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-271771r1208733_rule, STIG-ID|OL09-00-002502, Vuln-ID|V-271771
Plugin: Unix
Control ID: 687fb43b604156881b3be9049e3f425fb795434009283c3435dc7dc731a28c9c