Detections
Analytics

PHTN-40-000210 - The Photon operating system must disable the debug-shell service.

Information

The debug-shell service is intended to diagnose systemd related boot issues with various systemctl commands. Once enabled and following a system reboot, the root shell will be available on tty9. This service must remain disabled until and unless otherwise directed by VMware support.

Solution

At the command line, run the following commands:

# systemctl stop debug-shell.service
# systemctl disable debug-shell.service

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y26M07_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-258873r991589_rule, STIG-ID|PHTN-40-000210, Vuln-ID|V-258873

Plugin: Unix

Control ID: cfe943f00dbd77098fea7adf363339b054600d514ebe5995a9ffa92e55589ec6