Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide
SRG-OS-000480-GPOS-00227
The Photon operating system must configure sshd to ignore user-specific "known_host" files.
The Photon operating system must configure sshd to ignore user-specific "known_host" files.
An XCCDF Rule
Details
Profiles
Prose
The Photon operating system must configure sshd to ignore user-specific "known_host" files.
Medium Severity
<VulnDiscussion>Secure Shell (SSH) trust relationships enable trivial lateral spread after a host compromise and therefore must be explicitly disabled. Individual users can have a local list of trusted remote machines that must also be ignored while disabling host-based authentication generally.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>