Risk Factor: medium
Title: OpenSSH configured without SFTP subsystem
Summary: The RHEL9 is changing the default SCP behaviour to use SFTP internally so not having SFTP server enabled can prevent interoperability and break existing scripts on other systems updated to RHEL9 to copy files to or from this machine.
Remediation: [hint] Add the following line to the /etc/ssh/sshd_config to enable SFTP server: Subsystem sftp /usr/libexec/openssh/sftp-server
Key: d986c1dae70b04553548071764c4f6d3af30d477

# grep -R Subsystem /etc/ssh
/etc/ssh/sshd_config.d/45-service.conf:Subsystem sftp internal-sftp -f AUTH -l INFO

# sshd -T | grep -i sftp
subsystem sftp internal-sftp -f AUTH -l INFO