TMAegisBeta
Više pravila za cos

Container-Optimized OS

TMA-COS-5.1.4

Ensure SSH Protocol is set to 2

SrednjaNivo 1Automatskacos

Opis

Older versions of SSH support two different and incompatible protocols: SSH1 and SSH2. SSH1 was the original protocol and was subject to security issues. SSH2 is more advanced and secure. SSH v1 suffers from insecurities that do not affect SSH v2.

Kako se proverava

Metod provere: Komanda ljuske

shell
alt0() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; o=$(bash -c 'grep ^Protocol /etc/ssh/sshd_config' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Protocol 2' || { echo step1: missing 'Protocol 2'; return 1; }; }; if alt0; then echo compliant; fi
Očekivani izlaz
compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Edit the /etc/ssh/sshd_config file to set the parameter as follows: Protocol 2

Svojstva

Operativni sistemi
Bilo koji
Oznake
container-optimized-oscosssh
Referenca
CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.1.4 Ensure SSH Protocol is set to 2

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell
tmaegis scan --target cos