Skip to content

SLEM 5 SSH daemon must perform strict mode checking of home directory configuration files.

An XCCDF Rule

Description

If other users have access to modify user-specific SSH configuration files, they may be able to log on to the system as another user.

ID
SV-261341r996486_rule
Version
SLEM-05-255080
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Configure SLEM 5 SSH daemon performs strict mode checking of home directory configuration files.

Add or modify the following line in the "/etc/ssh/sshd_config" file:

StrictModes yes