← Rules Catalog
mediumaccess-controlverified rollback-safe

Ensure sshd HostbasedAuthentication is disabled

ssh-disable-hostbased-auth · RHEL ≥ 8 · 2 impls

Description

The sshd HostbasedAuthentication directive must be properly configured.

Rationale

Improper SSH HostbasedAuthentication configuration could weaken the security of remote access to the system.

Check → Remediate

Checksshd_effective_config
key:
hostbasedauthentication
expected:
no
Remediateconfig_set
path:
/etc/ssh/sshd_config
key:
HostbasedAuthentication
value:
no
separator:
reload:
sshd

Framework references

CIS

rhel9 5.1.12rhel10 5.1.10rhel8 5.1.12

STIG

V-281266 / RHEL-10-700630V-257992 / RHEL-09-255080

NIST 800-53

AC-17SC-8CM-6AC-3

Live verification

rhel10:checkrhel8:checkrhel9:check
#ssh#sshd#access-control