STIGQter: STIG Summary: Oracle Linux 7 Security Technical Implementation Guide Version: 2 Release: 3 Benchmark Date: 23 Apr 2021:

The Oracle Linux operating system must be configured so that all networked systems have SSH installed.

DISA Rule

SV-221847r603260_rule

Vulnerability Number

V-221847

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

OL07-00-040300

Severity

CAT II

CCI(s)

• CCI-002418 - The information system protects the confidentiality and/or integrity of transmitted information.
• CCI-002420 - The information system maintains the confidentiality and/or integrity of information during preparation for transmission.
• CCI-002422 - The information system maintains the confidentiality and/or integrity of information during reception.

Weight

10

Fix Recommendation

Install SSH packages onto the host with the following commands:

# yum install openssh-server.x86_64

Check Contents

Check to see if sshd is installed with the following command:

# yum list installed \*ssh\*
libssh2.x86_64 1.4.3-8.el7 @anaconda/7.1
openssh.x86_64 6.6.1p1-11.el7 @anaconda/7.1
openssh-server.x86_64 6.6.1p1-11.el7 @anaconda/7.1

If the "SSH server" package is not installed, this is a finding.

Vulnerability Number

V-221847

Documentable

False

Rule Version

OL07-00-040300

Severity Override Guidance

Check to see if sshd is installed with the following command:

# yum list installed \*ssh\*
libssh2.x86_64 1.4.3-8.el7 @anaconda/7.1
openssh.x86_64 6.6.1p1-11.el7 @anaconda/7.1
openssh-server.x86_64 6.6.1p1-11.el7 @anaconda/7.1

If the "SSH server" package is not installed, this is a finding.

Check Content Reference

M

Target Key

4089

Comments