V-22471

CAT II (Medium)

The SSH public host key files must have mode 0644 or less permissive.

Rule ID

SV-46050r1_rule

STIG

Version

V1R12

CCIs

If a public host key file is modified by an unauthorized user, the SSH service may be compromised.

Check the permissions for SSH public host key files.
# ls -lL /etc/ssh/*key.pub
If any file has a mode more permissive than 0644, this is a finding.

Change the permissions for the SSH public host key files.
# chmod 0644 /etc/ssh/*key.pub