Detections
Analytics

SLEM-05-255080 - SLEM 5 SSH daemon must perform strict mode checking of home directory configuration files.

Information

If other users have access to modify user-specific SSH configuration files, they may be able to log on to the system as another user.

Solution

Configure SLEM 5 SSH daemon performs strict mode checking of home directory configuration files.

Add or modify the following line in the "/etc/ssh/sshd_config" file:

StrictModes yes

Restart the SSH daemon in order for the changes to take effect:

 > sudo systemctl restart sshd.service

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-261341r996486_rule, STIG-ID|SLEM-05-255080, Vuln-ID|V-261341

Plugin: Unix

Control ID: 50df276342d070ebe0a4220add7e1fd213dd5298e74c2a769445bcc633481be5