{"description": "Ensure that the SSH server service is enabled.\n\nThe <code>sshd</code> service can be enabled with the following command:\n<pre>$ sudo systemctl enable sshd.service</pre>", "rationale": "Logging into a web server remotely using an unencrypted protocol or service\nwhen performing updates and maintenance is a major risk. Data, such as user\naccount, is transmitted in plaintext and can easily be compromised. When\nperforming remote administrative tasks, a protocol or service that encrypts the\ncommunication channel must be used.\n<br /><br />\nAn alternative to remote administration of\nthe web server is to perform web server administration locally at the console.\nLocal administration at the console implies physical access to the server.", "severity": "high", "references": {}, "control_references": {}, "components": [], "identifiers": {}, "ocil_clause": null, "ocil": "\n\nRun the following command to determine the current status of the\n<code>sshd</code> service:\n<pre>$ sudo systemctl is-active sshd</pre>\nIf the service is running, it should return the following: <pre>active</pre>", "oval_external_content": null, "fixtext": "", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": null, "platforms": [], "sce_metadata": {}, "inherited_platforms": [], "cpe_platform_names": [], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Ensure Remote Administrative Access Is Encrypted", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/services/http/securing_httpd/httpd_configure_os_protect_web_server/httpd_configure_remote_session_encryption/rule.yml", "template": null}