mediumaccess-controlverified ✓rollback-safe
Ensure sshd HostbasedAuthentication is disabled
ssh-disable-hostbased-auth · RHEL ≥ 8 · 2 impls
Description
The sshd HostbasedAuthentication directive must be properly configured.
Rationale
Improper SSH HostbasedAuthentication configuration could weaken the security of remote access to the system.
Check → Remediate
Checksshd_effective_config
- key:
- hostbasedauthentication
- expected:
- no
Remediateconfig_set
- path:
- /etc/ssh/sshd_config
- key:
- HostbasedAuthentication
- value:
- no
- separator:
- reload:
- sshd
Framework references
CIS
rhel9 5.1.12rhel10 5.1.10rhel8 5.1.12
STIG
V-281266 / RHEL-10-700630V-257992 / RHEL-09-255080
NIST 800-53
AC-17SC-8CM-6AC-3
Live verification
rhel10:checkrhel8:checkrhel9:check
#ssh#sshd#access-control