UCF STIG Viewer Logo

The Photon operating system must protect sshd configuration from unauthorized access.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239190 PHTN-67-000119 SV-239190r675378_rule Medium
Description
The sshd_config file contains all the configuration items for sshd. Incorrect or malicious configuration of sshd can allow unauthorized access to the system, insecure communication, limited forensic trail, etc.
STIG Date
VMware vSphere 6.7 Photon OS Security Technical Implementation Guide 2022-06-17

Details

Check Text ( C-42401r675376_chk )
At the command line, execute the following command:

# stat -c "%n permissions are %a and owned by %U:%G" /etc/ssh/sshd_config

Expected result:

/etc/ssh/sshd_config permissions are 600 and owned by root:root

If the output does not match the expected result, this is a finding.
Fix Text (F-42360r675377_fix)
At the command line, execute the following commands:

# chmod 600 /etc/ssh/sshd_config
# chown root:root /etc/ssh/sshd_config