STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 4 Security Technical Implementation Guide Version: 2 Release: 6 Benchmark Date: 01 Jul 2026:

All TOSS networked systems must have and implement SSH to protect the confidentiality and integrity of transmitted and received information, as well as information during preparation for transmission.

DISA Rule

SV-252934r958908_rule

Vulnerability Number

V-252934

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

TOSS-04-010280

Severity

CAT II

CCI(s)

• CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
• CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.
• CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
• CCI-002422 - Maintain the confidentiality and/or integrity of information during reception.

Weight

10

Fix Recommendation

Install the SSH server package onto the host with the following command:

$ sudo yum install openssh-server

Configure the SSH service to automatically start now and after each reboot with the following command:

$ sudo systemctl enable --now sshd.service

Check Contents

Verify that the SSH package is installed:

$ rpm -q openssh-server
openssh-server-8.0p1-10.el8_4.2.x86_64

If the "SSH server" package is not installed, this is a finding.

Verify SSH is loaded and active with the following commands:

$ sudo systemctl is-active sshd
active

$ sudo systemctl is-enabled sshd
enabled

If "sshd" does not show a status of "active" and "enabled", this is a finding.

Vulnerability Number

V-252934

Documentable

False

Rule Version

TOSS-04-010280

Severity Override Guidance

Verify that the SSH package is installed:

$ rpm -q openssh-server
openssh-server-8.0p1-10.el8_4.2.x86_64

If the "SSH server" package is not installed, this is a finding.

Verify SSH is loaded and active with the following commands:

$ sudo systemctl is-active sshd
active

$ sudo systemctl is-enabled sshd
enabled

If "sshd" does not show a status of "active" and "enabled", this is a finding.

Check Content Reference

M

Target Key

5469