STIGQter: STIG Summary: Oracle Linux 8 Security Technical Implementation Guide Version: 2 Release: 9 Benchmark Date: 01 Jul 2026:

All OL 8 networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.

DISA Rule

SV-248867r958908_rule

Vulnerability Number

V-248867

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

OL08-00-040160

Severity

CAT II

CCI(s)

CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.
CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
CCI-002422 - Maintain the confidentiality and/or integrity of information during reception.

Weight

Fix Recommendation

Configure the SSH service to automatically start after reboot with the following command:

$ sudo systemctl enable sshd.service

Check Contents

Verify SSH is loaded and active with the following command:

$ sudo systemctl status sshd

sshd.service - OpenSSH server daemon
Loaded: loaded (/usr/lib/systemd/system/sshd.service; enabled)
Active: active (running) since Tue 2015-11-17 15:17:22 EST; 4 weeks 0 days ago
Main PID: 1348 (sshd)
CGroup: /system.slice/sshd.service
1053 /usr/sbin/sshd -D

If "sshd" does not show a status of "active" and "running", this is a finding.

Vulnerability Number

V-248867

Documentable

False

Rule Version

OL08-00-040160

Severity Override Guidance

Check Content Reference

Target Key

5416