STIGQter: STIG Summary: Anduril NixOS Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

NixOS must protect the confidentiality and integrity of transmitted information.

DISA Rule

SV-268159r1131124_rule

Vulnerability Number

V-268159

Group Title

SRG-OS-000423-GPOS-00187

Rule Version

ANIX-00-001620

Severity

CAT I

CCI(s)

CCI-002418 - Protect the confidentiality and/or integrity of transmitted information.
CCI-001941 - Implement replay-resistant authentication mechanisms for access to privileged accounts and/or non-privileged accounts.
CCI-002421 - Implement cryptographic mechanisms to prevent unauthorized disclosure of information and/or detect changes to information during transmission.
CCI-002420 - Maintain the confidentiality and/or integrity of information during preparation for transmission.
CCI-002422 - Maintain the confidentiality and/or integrity of information during reception.

Weight

Fix Recommendation

Configure NixOS to enable sshd for remote access.

Add the following Nix code to the NixOS Configuration, usually located in /etc/nixos/configuration.nix or /etc/nixos/flake.nix:

services.sshd.enable = true;

Rebuild and switch to the new NixOS configuration:
$ sudo nixos-rebuild switch

Check Contents

Verify NixOS enables sshd for remote access with the following command:

$ systemctl status sshd

sshd.service - SSH daemon
Loaded: loaded (/etc/systemd/system/sshd.service; enabled; present: enabled)
Active: active (running) since Sat 2022-06-04 02:51:43 UTC; 13min ago

If the sshd.service is not "active" and "running", this is a finding.

Vulnerability Number

V-268159

Documentable

False

Rule Version

ANIX-00-001620

Severity Override Guidance

Check Content Reference

Target Key

5658