Skip to content

AIX SSH daemon must perform strict mode checking of home directory configuration files.

An XCCDF Rule

Description

If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.

ID
SV-215299r991589_rule
Version
AIX7-00-002116
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Edit the "/etc/sshd/sshd_config" file and add or change the "StrictModes"  setting to "yes".

Restart the SSH daemon:
# stopsrc -s sshd
# startsrc -s sshd