/etc/sshd_config - Protocol version must be securely configured.

From MAC OSX 10.6 Workstation Security Technical Implementation Guide

Part of OSX00175-Securely configure sshd Protocol version

Associated with IA controls: ECSC-1

SV-37209r1_rule /etc/sshd_config - Protocol version must be securely configured.

Vulnerability discussion

Restricts OpenSSH so it uses only SSH Protocol 2. This should be set for all SSH methods of authenticating.

Check content

1. Open a terminal session and enter the following command. more /etc/sshd_config 2. Ensure the value Protocol is set to "2". If the value Protocol is not set to "2", this is a finding.

Fix text

1. Open a terminal session and enter the following command. sudo pico /etc/sshd_config 2. Edit the value "Protocol" and set it to "2". 3. Save the file.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.