Skip to content
Log In

SLEM 5 SSH daemon public host key files must have mode 644 or less permissive.

An XCCDF Rule

Description

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

ID
SV-261293r996357_rule
Version
SLEM-05-232040
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure SLEM 5 SSH daemon public host key files have mode "644" or less permissive.

Note: SSH public key files may be found in other directories on the system depending on the installation.

Change the mode of public host key files under "/etc/ssh" to "644" with the following command:

     > sudo chmod 644 /etc/ssh/ssh_host*key.pub