Skip to content
Log In

Install the OpenSSH Client and Server Package

An XCCDF Rule

Description

The openssh package should be installed. The openssh package can be installed with the following command: 
$ sudo zypper install openssh

Rationale

Without protection of the transmitted information, confidentiality, and integrity may be compromised because unprotected communications can be intercepted and either read or altered.

ID
xccdf_org.ssgproject.content_rule_package_openssh_installed
Severity
Medium
References
Updated

Remediation Templates

A Puppet Snippet

include install_openssh
class install_openssh {
  package { 'openssh':
    ensure => 'installed',
  }
}

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - NIST-800-53-CM-6(a)
  - enable_strategy

OS Build Blueprint

[[packages]]
name = "openssh"
version = "*"

A Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then
zypper install -y "openssh"

else
    >&2 echo 'Remediation is not applicable, nothing was done'
fi