Detections
Analytics

ESXI-67-000079 - The ESXi host must not suppress warnings that the local or remote shell sessions are enabled.

Information

Warnings that local or remote shell sessions are enabled alert administrators to activity that they may not be aware of and need to investigate.

Solution

From the vSphere Web Client, select the host and click Configure >> System >> Advanced System Settings.

Find the 'UserVars.SuppressShellWarning' value and set it to the following:

0

or

From a PowerCLI command prompt while connected to the ESXi host, run the following command:

Get-VMHost | Get-AdvancedSetting -Name UserVars.SuppressShellWarning | Set-AdvancedSetting -Value '0'

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_6-7_Y23M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-239329r674916_rule, STIG-ID|ESXI-67-000079, Vuln-ID|V-239329

Plugin: VMware

Control ID: fde4ee560e76f4484a3c51c4d8f971837883ef5ad42c62ac84bfec919eb1683e