The Photon operating system must protect sshd configuration from unauthorized access.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-256581	PHTN-30-000112	SV-256581r887417_rule		Medium

Description
The "sshd_config" file contains all the configuration items for sshd. Incorrect or malicious configuration of sshd can allow unauthorized access to the system, insecure communication, limited forensic trail, etc.

STIG	Date
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide	2023-12-01

Details

Check Text ( C-60256r887415_chk )
At the command line, run the following command: # stat -c "%n permissions are %a and owned by %U:%G" /etc/ssh/sshd_config Expected result: /etc/ssh/sshd_config permissions are 600 and owned by root:root If the output does not match the expected result, this is a finding.

Fix Text (F-60199r887416_fix)
At the command line, run the following commands: # chmod 600 /etc/ssh/sshd_config # chown root:root /etc/ssh/sshd_config