The Photon operating system must configure Secure Shell (SSH) to perform strict mode checking of home directory configuration files.
An XCCDF Rule
Description
If other users have access to modify user-specific SSH configuration files, they may be able to log on to the system as another user.
- ID
- SV-258876r933689_rule
- Version
- PHTN-40-000213
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
Navigate to and open:
/etc/ssh/sshd_config
Ensure the "StrictModes" line is uncommented and set to the following: