SSH daemon is running - Exception Found

[maxdd]

Hello, most likely related to the fact that i have set

sudo chmod 600 /etc/ssh/sshd_config

but when i run lynis as normal user i get

[+] SSH Support
------------------------------------
  - Checking running SSH daemon                               [ FOUND ]
    - Searching SSH configuration                             [ NOT FOUND ]

=================================================================

  Exception found!

  Function/test:  [SSH-7404:1]
  Message:        SSH daemon is running, but no readable configuration file found

  Help improving the Lynis community with your feedback!

  Steps:
  - Ensure you are running the latest version (./lynis update check)
  - If so, create a GitHub issue at https://github.com/CISOfy/lynis
  - Include relevant parts of the log file or configuration file

  Thanks!

=================================================================

Regards,

[mboelen]

Thanks for reporting. For the details, please see the lynis.log file (lynis show details SSH-7404).

What does it show?

[maxdd]

2024-05-27 10:27:51 Performing test ID SSH-7404 (Check SSH daemon file location)
2024-05-27 10:27:51 Test: searching for sshd_config file
2024-05-27 10:27:51 Result: /etc/ssh/sshd_config exists
2024-05-27 10:27:51 Test: check if we can access /etc/ssh/sshd_config (escaped: /etc/ssh/sshd_config)
2024-05-27 10:27:51 Result: file is not owned by current user ID (1000), but UID 0
2024-05-27 10:27:51 Result: can not read /etc/ssh/sshd_config file (no permission)
2024-05-27 10:27:51 Result: No sshd configuration found
2024-05-27 10:27:51 Exception: test has an exceptional event (SSH-7404:1) with text SSH daemon is running, but no readable configuration file found
2024-05-27 10:27:56 ====

[mboelen]

This is then to be expected, as you tightened things down. One option that I see is to replace the message "not found" with "not readable by user" or something, and to prevent the exception. Will give it a thought and see what we can change.

Edit: Adding some tags to allow others to chime in.