{"id":3434,"date":"2017-07-07T00:00:49","date_gmt":"2017-07-06T15:00:49","guid":{"rendered":"http:\/\/www.catracing.org\/hendrb\/?p=3434"},"modified":"2017-07-04T00:39:44","modified_gmt":"2017-07-03T15:39:44","slug":"quickie-mac-osx-securing-sshd_config","status":"publish","type":"post","link":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/","title":{"rendered":"Quickie – Mac OSX – Securing sshd_config"},"content":{"rendered":"

Mac OS X Quickie <\/span>
\nSecuring sshd_config<\/span><\/h1>\n
\n

 <\/p>\n

Overview \u2013 While transferring the configuration files from my Late 2012 Mac Mini to my new Mac Pro, I noticed a pretty glaring security issue with the configuration file for the SSH daemon.  SSH, or secure shell, is a means of remotely accessing your server or workstations shell, through a terminal. It is similar to telnet, with the added benefit of being encrypted.  Telnet sends all traffic including username and passwords over the network in clear text. <\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

By default the configuration file is readable by all users.  So anyone who gains access to the system, can look at this configuration file to determine if there are any vulnerabilities caused by misconfiguration of the ssh daemon. While this is easily rectified, it is a glaring security hole that left me a little surprised.. Here are the POSIX permissions from a Centos 7.0 server.<\/p>\n

\"\"<\/a><\/p>\n

Do you see the difference?<\/p>\n

Mac OS X by default gives the read permission to the <other> group, allowing any user the ability to view the \/etc\/ssh\/ssd_config.  We are going to fix this, and I advise you to do the same on any Mac server or desktop computer with SSH enabled.<\/p>\n

Launch your terminal application, either from Go > Utilities > Terminal.app, or Shift-Command U > Terminal App. With a privileged account, type the following.<\/p>\n

$ sudo chmod o-r \/etc\/ssh\/sshd_config<\/span><\/p>\n

If successful, you will be returned to the terminal prompt and you can verify the changes by performing a long directory listing.<\/p>\n

$ ls \u2013l<\/span><\/p>\n

You should now see the following.<\/p>\n

\"\"<\/a><\/p>\n

 <\/p>\n

You can further test by switching to a non privileged account and trying to read the file.<\/p>\n

$ cat \/etc\/ssh\/sshd_config<\/span><\/p>\n

You should see the following message.
\ncat: \/etc\/ssh\/sshd_config: Permission denied<\/p>\n

Thank you for your continued patronage of Brent\u2019s World (An American Expat Living And Working In Korea!).  Please continue to visit for more exiting travel and technical blogs!<\/p>\n

If you wish to be notified of new content, please sign up for an account by clicking HERE<\/a>!<\/p>\n

 <\/p>\n

 <\/p>\n","protected":false},"excerpt":{"rendered":"

Mac OS X Quickie Securing sshd_config   Overview \u2013 While transferring the configuration files from my Late 2012 Mac Mini to my new Mac Pro, I noticed a pretty glaring security issue with the configuration file for the SSH daemon. …<\/span> Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[3],"tags":[],"class_list":["post-3434","post","type-post","status-publish","format-standard","hentry","category-technical"],"yoast_head":"\nQuickie - Mac OSX - Securing sshd_config - Brent's World<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Quickie - Mac OSX - Securing sshd_config - Brent's World\" \/>\n<meta property=\"og:description\" content=\"Mac OS X Quickie Securing sshd_config   Overview \u2013 While transferring the configuration files from my Late 2012 Mac Mini to my new Mac Pro, I noticed a pretty glaring security issue with the configuration file for the SSH daemon. … Continue reading →\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\" \/>\n<meta property=\"og:site_name\" content=\"Brent's World\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/Brents-World-912767498915017\" \/>\n<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/Brents-World-912767498915017\" \/>\n<meta property=\"article:published_time\" content=\"2017-07-06T15:00:49+00:00\" \/>\n<meta property=\"og:image\" content=\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg\" \/>\n<meta name=\"author\" content=\"Brent Hendricks\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Brent Hendricks\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"2 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\"},\"author\":{\"name\":\"Brent Hendricks\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442\"},\"headline\":\"Quickie – Mac OSX – Securing sshd_config\",\"datePublished\":\"2017-07-06T15:00:49+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\"},\"wordCount\":366,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442\"},\"image\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg\",\"articleSection\":[\"Technical\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\",\"url\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\",\"name\":\"Quickie - Mac OSX - Securing sshd_config - Brent's World\",\"isPartOf\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage\"},\"thumbnailUrl\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg\",\"datePublished\":\"2017-07-06T15:00:49+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage\",\"url\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg\",\"contentUrl\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/www.catracing.org\/hendrb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Quickie – Mac OSX – Securing sshd_config\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#website\",\"url\":\"https:\/\/www.catracing.org\/hendrb\/\",\"name\":\"Brent's World\",\"description\":\"Your weekly dose of the life of Brent!\",\"publisher\":{\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/www.catracing.org\/hendrb\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442\",\"name\":\"Brent Hendricks\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg\",\"url\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg\",\"contentUrl\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg\",\"width\":4480,\"height\":6720,\"caption\":\"Brent Hendricks\"},\"logo\":{\"@id\":\"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg\"},\"sameAs\":[\"http:\/\/www.catracing.org\",\"https:\/\/www.facebook.com\/Brents-World-912767498915017\"],\"url\":\"https:\/\/www.catracing.org\/hendrb\/author\/hendrb01\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Quickie - Mac OSX - Securing sshd_config - Brent's World","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/","og_locale":"en_US","og_type":"article","og_title":"Quickie - Mac OSX - Securing sshd_config - Brent's World","og_description":"Mac OS X Quickie Securing sshd_config   Overview \u2013 While transferring the configuration files from my Late 2012 Mac Mini to my new Mac Pro, I noticed a pretty glaring security issue with the configuration file for the SSH daemon. … Continue reading →","og_url":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/","og_site_name":"Brent's World","article_publisher":"https:\/\/www.facebook.com\/Brents-World-912767498915017","article_author":"https:\/\/www.facebook.com\/Brents-World-912767498915017","article_published_time":"2017-07-06T15:00:49+00:00","og_image":[{"url":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg","type":"","width":"","height":""}],"author":"Brent Hendricks","twitter_misc":{"Written by":"Brent Hendricks","Est. reading time":"2 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#article","isPartOf":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/"},"author":{"name":"Brent Hendricks","@id":"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442"},"headline":"Quickie – Mac OSX – Securing sshd_config","datePublished":"2017-07-06T15:00:49+00:00","mainEntityOfPage":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/"},"wordCount":366,"commentCount":0,"publisher":{"@id":"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442"},"image":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage"},"thumbnailUrl":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg","articleSection":["Technical"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/","url":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/","name":"Quickie - Mac OSX - Securing sshd_config - Brent's World","isPartOf":{"@id":"https:\/\/www.catracing.org\/hendrb\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage"},"image":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage"},"thumbnailUrl":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg","datePublished":"2017-07-06T15:00:49+00:00","breadcrumb":{"@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#primaryimage","url":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg","contentUrl":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2017\/06\/SSH-dir-permissions.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/www.catracing.org\/hendrb\/quickie-mac-osx-securing-sshd_config\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.catracing.org\/hendrb\/"},{"@type":"ListItem","position":2,"name":"Quickie – Mac OSX – Securing sshd_config"}]},{"@type":"WebSite","@id":"https:\/\/www.catracing.org\/hendrb\/#website","url":"https:\/\/www.catracing.org\/hendrb\/","name":"Brent's World","description":"Your weekly dose of the life of Brent!","publisher":{"@id":"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.catracing.org\/hendrb\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":["Person","Organization"],"@id":"https:\/\/www.catracing.org\/hendrb\/#\/schema\/person\/abd5b294207e782562c7bb51e0a9e442","name":"Brent Hendricks","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg","url":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg","contentUrl":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg","width":4480,"height":6720,"caption":"Brent Hendricks"},"logo":{"@id":"http:\/\/www.catracing.org\/hendrb\/wp-content\/uploads\/2019\/05\/Brent-Sitting-portrait-2.jpg"},"sameAs":["http:\/\/www.catracing.org","https:\/\/www.facebook.com\/Brents-World-912767498915017"],"url":"https:\/\/www.catracing.org\/hendrb\/author\/hendrb01\/"}]}},"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p43ojH-To","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/posts\/3434","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/comments?post=3434"}],"version-history":[{"count":0,"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/posts\/3434\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/media?parent=3434"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/categories?post=3434"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.catracing.org\/hendrb\/wp-json\/wp\/v2\/tags?post=3434"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}