← Back to IBM AIX 7.x Security Technical Implementation Guide

V-215299

CAT II (Medium)

AIX SSH daemon must perform strict mode checking of home directory configuration files.

Rule ID

SV-215299r991589_rule

STIG

IBM AIX 7.x Security Technical Implementation Guide

Version

V3R2

CCIs

CCI-000366

Discussion

If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.

Check Content

Check the SSH daemon configuration for the "StrictModes" setting using command: 

# grep -i StrictModes /etc/ssh/sshd_config | grep -v '^#' 
StrictModes yes

If the setting is missing or is set to "no", this is a finding.

Fix Text

Edit the "/etc/sshd/sshd_config" file and add or change the "StrictModes"  setting to "yes".

Restart the SSH daemon:
# stopsrc -s sshd
# startsrc -s sshd