I ran a lynis audit system
on a reasonably fresh ubuntu 18.04 instance, and of the more intriguing suggestions it made was:
Test: Checking Port in /tmp/lynis.AT7qAndGzq Result: Option Port found Result: Option Port value is 22 Result: SSH option Port is in a weak configuration state and should be fixed Suggestion: Consider hardening SSH configuration [test:SSH-7408] [details:Port (22 --> )] [solution:-]
I tried-, but failed to imagine the rationale behind this suggestion. I'm not even sure about what it means... Does it want me to disable sshd
altogether? That doesn't sound like a fine idea to me, though. If not, what does it mean, and how is it supposed to "harden the server's SSH configuration"?
The information at https://cisofy.com/lynis/controls/SSH-7408/ is short on details and I also tried checking the source on github looking for an answer, but became none the wiser.