STIGQter: STIG Summary: SUSE Linux Enterprise Micro (SLEM) 5 Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 01 Apr 2026:

SLEM 5, for PKI-based authentication, must enforce authorized access to the corresponding private key.

DISA Rule

SV-261342r996488_rule

Vulnerability Number

V-261342

Group Title

SRG-OS-000067-GPOS-00035

Rule Version

SLEM-05-255085

Severity

CAT II

CCI(s)

• CCI-000186 - For public key-based authentication, enforce authorized access to the corresponding private key.

Weight

10

Fix Recommendation

Create a new private and public key pair that uses a passcode with the following command:

> sudo ssh-keygen -n <passphrase>

Check Contents

Verify the SSH private key files have a passcode.

For each private key stored on the system, use the following command (with the example of "/etc/ssh/ssh_host_dsa_key"):

> ssh-keygen -y -f /etc/ssh/ssh_host_dsa_key
Load key "/etc/ssh/ssh_host_dsa_key": Permission denied

If the contents of any key are displayed, this is a finding.

Vulnerability Number

V-261342

Documentable

False

Rule Version

SLEM-05-255085

Severity Override Guidance

Verify the SSH private key files have a passcode.

For each private key stored on the system, use the following command (with the example of "/etc/ssh/ssh_host_dsa_key"):

> ssh-keygen -y -f /etc/ssh/ssh_host_dsa_key
Load key "/etc/ssh/ssh_host_dsa_key": Permission denied

If the contents of any key are displayed, this is a finding.

Check Content Reference

M

Target Key

5596