TMA-FREEBSD-4.2.10

Ensure sshd IgnoreRhosts is enabled

VisokaNivo 1Automatskafreebsd

Opis

The IgnoreRhosts parameter specifies that .rhosts and .shosts files will not be used in RhostsRSAAuthentication or HostbasedAuthentication. Setting this parameter forces users to enter a password when authenticating with SSH. Audit: evaluates the effective configuration from `sshd -T` (Match blocks must be reviewed separately).

Kako se proverava

Metod provere: Komanda ljuske

shell

command -v sshd >/dev/null 2>&1 || exit 1; out=$(sshd -T 2>/dev/null) || exit 1; r=compliant; for p in '^ignorerhosts[[:blank:]]+yes$'; do printf '%s\n' "$out" | grep -Eiq -- "$p" || r="not matched: $p"; done; echo "$r"

Očekivani izlaz: compliant

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Edit the /etc/ssh/sshd_config file to set the parameter above any Include entries as follows: IgnoreRhosts yes

Svojstva

Operativni sistemi: Bilo koji
Oznake: freebsdssh
Referenca: CIS FreeBSD 14 Benchmark v1.0.1 - 4.2.10 Ensure sshd IgnoreRhosts is enabled

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target freebsd