ESXI-80-000204 - The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.

Solution

From an ESXi shell, run the following command:

# esxcli system ssh server config set -k permituserenvironment -v no

or

From a PowerCLI command prompt while connected to the ESXi host, run the following commands:

$esxcli = Get-EsxCli -v2
$arguments = $esxcli.system.ssh.server.config.set.CreateArgs()
$arguments.keyword = 'permituserenvironment'
$arguments.value = 'no'
$esxcli.system.ssh.server.config.set.Invoke($arguments)

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_VMW_vSphere_8-0_Y25M01_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Rule-ID|SV-258762r959010_rule, STIG-ID|ESXI-80-000204, Vuln-ID|V-258762

Plugin: Unix

Control ID: c391f7f8320ab3c0ef89668a75f950bb38667385886d992903c5ce35b8bf3bbd