PHTN-67-000115 - The Photon operating system must be configured to protect the SSH public host key from unauthorized modification.

Information

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Solution

At the command line, execute the following commands for each returned file:

# chmod 644 <file>
# chown root:root <file>

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Audit Name: DISA STIG VMware vSphere 6.7 Photon OS v1r6

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-239186r675366_rule, STIG-ID|PHTN-67-000115, Vuln-ID|V-239186

Plugin: Unix

Control ID: 2fb7f5647091f1306e3b0dd2e3f675a513b6b95f93bf56a20d1c884b3cc6034e