Skip to content

Verify Group Ownership on SSH Server Public *.pub Key Files

An XCCDF Rule

Description

SSH server public keys, files that match the /etc/ssh/*.pub glob, must be group-owned by root group.

Rationale

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

ID
xccdf_org.ssgproject.content_rule_file_groupownership_sshd_pub_key
Severity
Medium
Updated