PHTN-40-000234 - The Photon operating system must be configured to protect the Secure Shell (SSH) private host key from unauthorized access.

Information

If an unauthorized user obtains the private SSH host key file, the host could be impersonated.

Solution

At the command line, run the following commands for each returned file:

# chmod 600 <file>
# chown root:root <file>
# systemctl restart sshd.service

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M10_STIG.zip

Item Details

Audit Name: DISA VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 STIG v2r3

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258896r991589_rule, STIG-ID|PHTN-40-000234, Vuln-ID|V-258896

Plugin: Unix

Control ID: d6b5e5a91d7953f4bd0b0903f558d2023a53270eb7fce7749abc26a2316eeb79