Detections
Analytics

SLEM-05-232040 - SLEM 5 SSH daemon public host key files must have mode 644 or less permissive.

Information

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Solution

Configure SLEM 5 SSH daemon public host key files have mode "644" or less permissive.

Note: SSH public key files may be found in other directories on the system depending on the installation.

Change the mode of public host key files under "/etc/ssh" to "644" with the following command:

 > sudo chmod 644 /etc/ssh/ssh_host*key.pub

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLEM_5_V1R4_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-261293r996357_rule, STIG-ID|SLEM-05-232040, Vuln-ID|V-261293

Plugin: Unix

Control ID: 4e60763213661b90634b221d4b4b4bc28a938bb10635043f2fbad353b12487fc