5.3.3 Ensure permissions on /etc/ssh/sshd_config are configured

Information

The /etc/ssh/sshd_config file contains configuration specifications for sshd. The command below sets the owner and group of the file to root.

Rationale:

The /etc/ssh/sshd_config file needs to be protected from unauthorized changes by non-privileged users.

Solution

Run the following commands to set ownership and permissions on /etc/ssh/sshd_config:

# chown root:root /etc/ssh/sshd_config

# chmod og-rwx /etc/ssh/sshd_config

Default Value:

Access: (0600/-rw-------) Uid: ( 0/ root) Gid: ( 0/ root)

See Also

https://workbench.cisecurity.org/files/3636