5.2.1 Ensure permissions on /etc/ssh/sshd_config are configured (Scored)

Level 1 - Server
Level 1 - Workstation 

The /etc/ssh/sshd_config file contains configuration specifications for sshd. The command below sets the owner and group of the file to root.

The /etc/ssh/sshd_config file needs to be protected from unauthorized changes by non-privileged users.

Run the following command and verify Uid and Gid are both 0/root and Access does not grant permissions to group or other:

# stat /etc/ssh/sshd_config
Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root)

Run the following commands to set ownership and permissions on /etc/ssh/sshd_config:

# chown root:root /etc/ssh/sshd_config
# chmod og-rwx /etc/ssh/sshd_config
  • ubuntu1604/5/2/1.txt
  • Last modified: 2017/05/04 11:12
  • by Piotr Kłoczewski