>From efde43e809ea0ea47cf3d92eb259fea52a95cd3c Mon Sep 17 00:00:00 2001 From: Shawn Wells Date: Fri, 1 Mar 2013 22:41:50 -0500 Subject: [PATCH] [bugfix] ticket 289 - add sshd_config filename to check instructions RHEL-06-000235, RHEL-06-000237, RHEL-06-000238: Add the filename '/etc/ssh/sshd_config' to the instructions. --- RHEL6/input/services/ssh.xml | 5 +++-- 1 files changed, 3 insertions(+), 2 deletions(-) diff --git a/RHEL6/input/services/ssh.xml b/RHEL6/input/services/ssh.xml index 32e7598..75c4921 100644 --- a/RHEL6/input/services/ssh.xml +++ b/RHEL6/input/services/ssh.xml @@ -230,7 +230,7 @@ not recommended that hosts unilaterally trust one another, even within an organization.

To disable host-based authentication, add or correct the -following line: +following line in /etc/ssh/sshd_config:
HostbasedAuthentication no
@@ -251,7 +251,8 @@ can allow an attacker to move trivially to other hosts. Disable SSH Root Login The root user should never be allowed to login to a system directly over a network. -To disable root login via SSH, add or correct the following line: +To disable root login via SSH, add or correct the following line +in /etc/ssh/sshd_config:
PermitRootLogin no
-- 1.7.1