An error occurred:

Red Hat Enterprise Linux 7 STIG

Red Hat Enterprise Linux 7 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
RHEL-07-040340 V-204589 The Red Hat Enterprise Linux operating system must be configured so that all network connections associated with SSH traffic terminate after becoming unresponsive. Cat II
RHEL-07-040350 V-204590 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not allow authentication using rhosts authentication. Cat II
RHEL-07-040360 V-204591 The Red Hat Enterprise Linux operating system must display the date and time of the last successful account logon upon an SSH logon. Cat II
RHEL-07-040370 V-204592 The Red Hat Enterprise Linux operating system must not permit direct logons to the root account using remote access via SSH. Cat II
RHEL-07-040380 V-204593 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not allow authentication using known hosts authentication. Cat II
RHEL-07-040390 V-204594 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon is configured to only use the SSHv2 protocol. Cat I
RHEL-07-040400 V-204595 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon is configured to only use Message Authentication Codes (MACs) employing FIPS 140-2 approved cryptographic hash algorithms. Cat II
RHEL-07-040410 V-204596 The Red Hat Enterprise Linux operating system must be configured so that the SSH public host key files have mode 0644 or less permissive. Cat II
RHEL-07-040420 V-204597 The Red Hat Enterprise Linux operating system must be configured so that the SSH private host key files have mode 0640 or less permissive. Cat II
RHEL-07-040430 V-204598 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not permit Generic Security Service Application Program Interface (GSSAPI) authentication unless needed. Cat II
RHEL-07-040440 V-204599 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not permit Kerberos authentication unless needed. Cat II
RHEL-07-040450 V-204600 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon performs strict mode checking of home directory configuration files. Cat II
RHEL-07-040460 V-204601 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon uses privilege separation. Cat II
RHEL-07-040470 V-204602 The Red Hat Enterprise Linux operating system must be configured so that the SSH daemon does not allow compression or only allows compression after successful authentication. Cat II
RHEL-07-040500 V-204603 The Red Hat Enterprise Linux operating system must, for networked systems, synchronize clocks with a server that is synchronized to one of the redundant United States Naval Observatory (USNO) time servers, a time server designated for the appropriate DoD network (NIPRNet/SIPRNet), and/or the Global Positioning System (GPS). Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.