Skip to content

5.2.1 Ensure permissions on /etc/ssh/sshd_config are configured

Audit#

Run the following command and verify Uid and Gid are both 0/root and Access does not grant permissions to group or other: 

# stat /etc/ssh/sshd_config

Verify the output matches: 

Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root)

Remediation#

Run the following commands to set ownership and permissions on /etc/ssh/sshd_config: 

# chown root:root /etc/ssh/sshd_config
# chmod og-rwx /etc/ssh/sshd_config