The Photon operating system must configure sshd to disallow compression of the encrypted session stream.
An XCCDF Rule
Description
If compression is allowed in a Secure Shell (SSH) connection prior to authentication, vulnerabilities in the compression software could result in compromise of the system from an unauthenticated connection.
- ID
- SV-256553r991589_rule
- Version
- PHTN-30-000084
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/ssh/sshd_config
Ensure the "Compression" line is uncommented and set to the following: