From 93b1278cd0508b83d359fe3d11f6db609abc2c2f Mon Sep 17 00:00:00 2001 From: Edgar Aguilar Date: Fri, 23 Aug 2024 16:11:29 -0600 Subject: [PATCH] Update ism control Add 0484 id, and add file_permissions_sshd_private_key to 1449 Signed-off-by: Edgar Aguilar --- controls/ism_o.yml | 11 ++++++++++- 1 file changed, 10 insertions(+), 1 deletion(-) diff --git a/controls/ism_o.yml b/controls/ism_o.yml index f034d8877fd..f9fb0d76271 100644 --- a/controls/ism_o.yml +++ b/controls/ism_o.yml @@ -95,7 +95,15 @@ controls: - sshd_set_max_auth_tries - sssd_enable_smartcards status: automated - + - id: '0484' + title: 'SSH daemon configuration' + levels: + - base + rules: + - disable_host_auth + - sshd_enable_warning_banner + - sshd_disable_x11_forwarding + status: partial - id: '0487' title: 'Passwordless SSH Connections Configuration' levels: @@ -429,6 +437,7 @@ use of device access control software or by disabling external communication int - base rules: - sshd_allow_only_protocol2 + - file_permissions_sshd_private_key status: partial notes: |- This needs more