UCF STIG Viewer Logo

The SSH daemon must not allow rhosts RSA authentication.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22487 GEN005538 SV-26786r1_rule ECSC-1 Medium
Description
If SSH permits rhosts RSA authentication, a user may be able to log in based on the keys of the host originating the request and not any user-specific authentication.
STIG Date
SOLARIS 9 X86 SECURITY TECHNICAL IMPLEMENTATION GUIDE 2015-10-01

Details

Check Text ( C-27789r1_chk )
Check the SSH daemon configuration for the RhostsRSAAuthentication setting.
# grep -i RhostsRSAAuthentication /etc/ssh/sshd_config | grep -v '^#'
If the setting is not present or not set to no, this is a finding.
Fix Text (F-24035r1_fix)
Edit the SSH daemon configuration and add or edit the RhostsRSAAuthentication setting value to no.