ESXI-67-000079 - The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Warnings that local or remote shell sessions are enabled alert administrators to activity that they may not be aware of and need to investigate.

Solution

From the vSphere Web Client, select the host and click Configure >> System >> Advanced System Settings.

Find the 'UserVars.SuppressShellWarning' value and set it to the following:

0

or

From a PowerCLI command prompt while connected to the ESXi host, run the following command:

Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value '0'

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Rule-ID|SV-239329r674916_rule, STIG-ID|ESXI-67-000079, Vuln-ID|V-239329

Plugin: VMware

Control ID: b759d0d6fd614a37a66c0398296d43a644f972b34fea5f7fb9d52cf11dd2ba30