Skip to content

Verify Ownership on SSH Server Public *.pub Key Files

An XCCDF Rule

Description

SSH server public keys, files that match the /etc/ssh/*.pub glob, must be owned by root user.

Rationale

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

ID
xccdf_org.ssgproject.content_rule_file_ownership_sshd_pub_key
Severity
Medium
Updated