Detections
Analytics

ESXI-06-000020 - The SSH daemon must perform strict mode checking of home directory configuration files.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

If other users have access to modify user-specific SSH configuration files, they may be able to log into the system as another user.

 NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

To set the StrictModes setting, add or correct the following line in '/etc/ssh/sshd_config':

StrictModes yes

See Also

http://iasecontent.disa.mil/stigs/zip/U_VMware_vSphere_6-0_ESXi_V1R4_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000366, Group-ID|V-63209, Rule-ID|SV-77699r1_rule, STIG-ID|ESXI-06-000020

Plugin: VMware

Control ID: 3d9a9c64abf7159768e0a56aa61a546597b0203ff1ba8a3dba220199b75bd74b