Container-Optimized OS
TMA-COS-5.1.4
Ensure SSH Protocol is set to 2
SrednjaNivo 1Automatskacos
Opis
Older versions of SSH support two different and incompatible protocols: SSH1 and SSH2. SSH1 was the original protocol and was subject to security issues. SSH2 is more advanced and secure. SSH v1 suffers from insecurities that do not affect SSH v2.
Kako se proverava
Metod provere: Komanda ljuske
shell
alt0() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; o=$(bash -c 'grep ^Protocol /etc/ssh/sshd_config' 2>&1); printf '%s\n' "$o" | tr -s ' \t' ' ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'Protocol 2' || { echo step1: missing 'Protocol 2'; return 1; }; }; if alt0; then echo compliant; fi- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Edit the /etc/ssh/sshd_config file to set the parameter as follows: Protocol 2
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- container-optimized-oscosssh
- Referenca
- CIS Google Container-Optimized OS Benchmark v1.2.0 - 5.1.4 Ensure SSH Protocol is set to 2
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
shell
tmaegis scan --target cos