Skip to content
ATO Pathways
  Log In

Install the OpenSSH Client and Server Package

An XCCDF Rule

Description

The openssh package should be installed. The openssh package can be installed with the following command: 

$ sudo zypper install openssh

Rationale

Without protection of the transmitted information, confidentiality, and integrity may be compromised because unprotected communications can be intercepted and either read or altered.

ID
xccdf_org.ssgproject.content_rule_package_openssh_installed
Severity
Medium
References
Updated



Remediation - Puppet

include install_openssh

class install_openssh {
  package { 'openssh':
    ensure => 'installed',
  }

Remediation - Shell Script

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then

zypper install -y "openssh"

else

Remediation - OS Build Blueprint


[[packages]]
name = "openssh"
version = "*"

Remediation - Ansible

- name: Ensure openssh is installed
  package:
    name: openssh
    state: present
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags: