UCF STIG Viewer Logo

The SSH public host key files must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22471 GEN005522 SV-26764r1_rule ECLP-1 Medium
Description
If a public host key file is modified by an unauthorized user, the SSH service may be compromised.
STIG Date
AIX 5.3 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2014-10-03

Details

Check Text ( C-27773r1_chk )
Check the permissions for SSH public host key files.
# ls -lL /etc/ssh/*key.pub
If any file has a mode more permissive than 0644, this is a finding.
Fix Text (F-24014r1_fix)
Change the permissions for the SSH public host key files.
# chmod 0644 /etc/ssh/*key.pub