UCF STIG Viewer Logo

The SSH daemon must not allow rhosts RSA authentication.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22487 GEN005538 SV-37905r2_rule Medium
Description
If SSH permits rhosts RSA authentication, a user may be able to log in based on the keys of the host originating the request and not any user-specific authentication.
STIG Date
Red Hat Enterprise Linux 5 Security Technical Implementation Guide 2017-03-01

Details

Check Text ( C-37131r1_chk )
Check the SSH daemon configuration for the RhostsRSAAuthentication setting.
# grep -i RhostsRSAAuthentication /etc/ssh/sshd_config | grep -v '^#'
If the setting is set to "yes", this is a finding.

Fix Text (F-32399r2_fix)
Edit the SSH daemon configuration and add or edit the "RhostsRSAAuthentication" setting value to "no".

Restart the SSH daemon.
# /sbin/service sshd restart