ESXI-06-000027 - The SSH daemon must set a timeout interval on idle sessions.

Information

Causing idle users to be automatically logged out guards against compromises one system leading trivially to compromises on another.

Solution

To set the ClientAliveInterval setting, add or correct the following line in '/etc/ssh/sshd_config':

ClientAliveInterval 200

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R5_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Group-ID|V-63223, Rule-ID|SV-77713r1_rule, STIG-ID|ESXI-06-000027, Vuln-ID|V-63223

Plugin: Unix

Control ID: 4916cf16e8ddba995b71091ed883cddc0d17db71c95496220736b1a8d45ac341