V-22472

CAT II (Medium)

The SSH private host key files must have mode 0600 or less permissive.

Rule ID

SV-46051r1_rule

STIG

Version

V1R12

CCIs

If an unauthorized user obtains the private SSH host key file, the host could be impersonated.

Check the permissions for SSH private host key files.
# ls -lL /etc/ssh/*key
If any file has a mode more permissive than 0600, this is a finding.

Change the permissions for the SSH private host key files.
# chmod 0600 /etc/ssh/*key