Skip to content
ATO Pathways
  Log In

Install the OpenSSH Client and Server Package

An XCCDF Rule

Description

The openssh package should be installed. The openssh package can be installed with the following command: 

$ sudo zypper install openssh

Rationale

Without protection of the transmitted information, confidentiality, and integrity may be compromised because unprotected communications can be intercepted and either read or altered.

ID
xccdf_org.ssgproject.content_rule_package_openssh_installed
Severity
Medium
References
Updated



Remediation - Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then

zypper install -y "openssh"

else

Remediation - Puppet

include install_openssh

class install_openssh {
  package { 'openssh':
    ensure => 'installed',
  }

Remediation - Ansible

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - NIST-800-53-CM-6(a)
  - enable_strategy

Remediation - OS Build Blueprint


[[packages]]
name = "openssh"
version = "*"