diff --git a/config/ssh/ssh_config b/config/ssh/ssh_config
index b36909f85..9f7121c76 100644
--- a/config/ssh/ssh_config
+++ b/config/ssh/ssh_config
@@ -33,4 +33,7 @@ Host *
         # ensure only allowed authentication methods are used
         PreferredAuthentications publickey,keyboard-interactive,password
 
+	# hash entries in ~/.ssh/known_hosts file to avoid permission disclosure
+	HashKnownHosts yes
+
 # EOF