Detections
Analytics

ESXi: esxi-8.ssh-rhosts

Information

The ESXi host Secure Shell (SSH) daemon must ignore .rhosts files. System services must be hardened and secured when enabled.

Solution

$ESXcli = Get-EsxCli -VMHost $ESXi -V2
$arguments = $ESXcli.system.ssh.server.config.set.CreateArgs()
$arguments.keyword = 'ignorerhosts'
$arguments.value = 'yes'
$ESXcli.system.ssh.server.config.set.Invoke($arguments)

See Also

https://github.com/vmware/vcf-security-and-compliance-guidelines/raw/refs/heads/main/security-configuration-hardening-guide/vsphere/8.0/

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-2(1), 800-53|IA-2(3), CCI|CCI-000765, CCI|CCI-000767

Plugin: Unix

Control ID: c253725cda3b7594f090bf713af56c99e796ba252069382bf0d11eb4fdc5c2fb