ESXI-06-000027 - The SSH daemon must set a timeout interval on idle sessions.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Causing idle users to be automatically logged out guards against compromises one system leading trivially to compromises on another.

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

To set the ClientAliveInterval setting, add or correct the following line in '/etc/ssh/sshd_config':

ClientAliveInterval 200

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R4_STIG.zip