Detections
Analytics
UBTU-16-030330 - The SSH daemon must perform strict mode checking of home directory configuration files.
Information
If other users have access to modify user-specific SSH configuration files, they may be able to log on to the system as another user.Solution
Configure SSH to perform strict mode checking of home directory configuration files. Uncomment the 'StrictModes' keyword in '/etc/ssh/sshd_config' and set the value to 'yes':StrictModes yes
The SSH daemon must be restarted for the changes to take effect. To restart the SSH daemon, run the following command:
# sudo systemctl restart sshd.service
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_CAN_Ubuntu_16-04_LTS_V2R3_STIG.zip
Item Details
Audit Name: DISA STIG Ubuntu 16.04 LTS v2r3
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-215134r610931_rule, STIG-ID|UBTU-16-030330, STIG-Legacy|SV-90527, STIG-Legacy|V-75847, Vuln-ID|V-215134
Plugin: Unix
Control ID: 3902b96739fb4d7972616e750f07ee0552e0854e9eb20f5189311b8f610ca846