Detections
Analytics
RHEL-09-255120 - RHEL 9 SSH private host key files must have mode 0600 or less permissive.
Information
If an unauthorized user obtains the private SSH host key file, the host could be impersonated.Solution
Configure the mode of SSH private host key files under "/etc/ssh" to "0600" with the following command:$ sudo chmod 0600 /etc/ssh/ssh_host*key
Restart the SSH daemon for the changes to take effect:
$ sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_RHEL_9_V2R9_STIG.zip
Item Details
Audit Name: DISA Red Hat Enterprise Linux 9 STIG v2r9
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258000r1208772_rule, STIG-ID|RHEL-09-255120, Vuln-ID|V-258000
Plugin: Unix
Control ID: 72da2ea2839c7385d216dec33915f9594f3e1113c14a8b0fda51f6b985105bb6