documentation_complete: true


title: 'Install the OpenSSH Client and Server Package'

description: |-
    The <tt>openssh</tt> package should be installed.
    {{{ describe_package_install(package="openssh") }}}

rationale: |-
    Without protection of the transmitted information, confidentiality, and
    integrity may be compromised because unprotected communications can be
    intercepted and either read or altered.

severity: medium

references:
    nist: CM-6(a)
    srg: SRG-OS-000423-GPOS-00187

ocil_clause: 'the package is not installed'

ocil: '{{{ ocil_package(package="openssh") }}}'

template:
    name: package_installed
    vars:
        pkgname: openssh
