Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
The SSH public host key files must have mode 0644 or less permissive.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22471 | GEN005522 | SV-35060r1_rule | ECLP-1 | Medium |
| Description |
|---|
| If a public host key file is modified by an unauthorized user, the SSH service may be compromised. |
| STIG | Date |
|---|---|
| HP-UX 11.31 Security Technical Implementation Guide | 2016-12-20 |
Details
| Check Text ( C-34928r1_chk ) |
|---|
| Check the permissions for the SSH public host key files. # ls -lL /opt/ssh/etc/ssh_host_dsa_key.pub # ls -lL /opt/ssh/etc/ssh_host_rsa_key.pub If any file has a mode more permissive than 0644, this is a finding. |
| Fix Text (F-30234r1_fix) |
|---|
| Change the permissions for the SSH public host key files. # chmod 0644 /opt/ssh/etc/*key.pub |