UCF STIG Viewer Logo

The SSH public host key files must have mode 0644 or less permissive.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22471 GEN005522 SV-35060r1_rule ECLP-1 Medium
Description
If a public host key file is modified by an unauthorized user, the SSH service may be compromised.
STIG Date
HP-UX 11.31 Security Technical Implementation Guide 2018-09-14

Details

Check Text ( C-34928r1_chk )
Check the permissions for the SSH public host key files.
# ls -lL /opt/ssh/etc/ssh_host_dsa_key.pub
# ls -lL /opt/ssh/etc/ssh_host_rsa_key.pub

If any file has a mode more permissive than 0644, this is a finding.
Fix Text (F-30234r1_fix)
Change the permissions for the SSH public host key files.
# chmod 0644 /opt/ssh/etc/*key.pub