Improving System Security - Avaya CS700 Administration And Maintenance

Table 48: Commands to configure SSH on the system (continued)
Step
pwd
mkdir .ssh
chown dcbdcbmaint .ssh
chgrp dcb .ssh
chmod 755 .ssh
cd /usr/dcbdcbmaint/.ssh
touch ./authorized_keys
chmod 600 .ssh
cd /usr/dcbdcbmaint/.ssh
chown dcbmaint
authorized_keys
chgrp dcb authorized_keys

Improving System Security

SSH will not improve System security unless you disable all of the unsecured Unix services.
You can control the System Security with the script 'dcbsyssecurity.sh' stored in /usr/dcb/bin.
Managing System Files from a Remote Host
Description
Verify that you are in the correct
directory
Creates the new .ssh directory.
Changes ownership of the directory to
dcbmaint
Changes group ownership to the dcb
group
Changes permission of the directory to
drwx r-x r-x
Changes to the /usr/dcbmaint/.ssh
directory.
Create the authorized_keys file which
stores the public key for each account.
Accomplish this by catting the public file
into the authorized file. Then change
permissions on the file.
Changes permission of the directory to
drwx r-x r-x
Changes directory to /usr/dcbmaint/
.ssh.
Changes ownership of the directory to
dcbmaint.
Changes group ownership to the dcb
group.
Issue 1 August 2007
2 of 2
245