Red Hat Enterprise Linux 5 Security Technical Implementation Guide

The Red Hat Enterprise Linux 5 Security Technical Implementation Guide (V1 R18) has 571 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

571STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R18

CurrentPublished Fri Apr 28 2017

The SSH daemon must use privilege separation.

Red Hat Enterprise Linux 5 Security Technical Implementation Guide

Assessment Title

Rule Text

The SSH daemon must use privilege separation.

Description

Discussion Text

SSH daemon privilege separation causes the SSH process to drop root privileges when not needed, which would decrease the impact of software vulnerabilities in the unprivileged section.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-22486

Rule

SV-37904r2_rule

Severity

medium

Rule Version

GEN005537

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the SSH daemon configuration for the UsePrivilegeSeparation setting.
# grep -i UsePrivilegeSeparation /etc/ssh/sshd_config | grep -v '^#' 
If the setting is not present, or not set to "yes", this is a finding.

Implementation Procedure

Fix Text

Edit the SSH daemon configuration and add or edit the "UsePrivilegeSeparation" setting value to "yes".   

Restart the SSH daemon.
# /sbin/service sshd restart

STIG check 243 of 571 in the Red Hat Enterprise Linux 5 STIG checklist

← Previous · V-22485The SSH daemon must perform strict mode checking of home directory configuration files.Next · V-22487 →The SSH daemon must not allow rhosts RSA authentication.