{"description": "The <tt>openssh</tt> package should be removed.\nThe <code>openssh</code> package can be removed with the following command:\n<pre>\n$ apt-get remove openssh</pre>", "rationale": "Without protection of the transmitted information, confidentiality, and\nintegrity may be compromised because unprotected communications can be\nintercepted and either read or altered.", "severity": "medium", "references": {}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": "the package is installed", "ocil": " Run the following command to determine if the <code>openssh</code> package is installed: <pre>$ dpkg -l  openssh</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": [], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Remove the OpenSSH Client and Server Package", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/ssh/package_openssh_removed/rule.yml", "template": {"name": "package_removed", "vars": {"pkgname": "openssh"}, "backends": {}}}