Skip to content
ATO Pathways
Log In
Overview
Search
Catalogs
SCAP
OSCAL
Catalogs
Profiles
Documents
References
Knowledge Base
Platform Documentation
Compliance Dictionary
Platform Changelog
About
Catalogs
XCCDF
VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide
SRG-OS-000480-GPOS-00227
The Photon operating system must configure Secure Shell (SSH) to ignore user-specific trusted hosts lists.
The Photon operating system must configure Secure Shell (SSH) to ignore user-specific trusted hosts lists.
An XCCDF Rule
Details
Profiles
Prose
The Photon operating system must configure Secure Shell (SSH) to ignore user-specific trusted hosts lists.
Medium Severity
<VulnDiscussion>SSH trust relationships enable trivial lateral spread after a host compromise and therefore must be explicitly disabled. Individual users can have a local list of trusted remote machines, which must also be ignored while disabling host-based authentication generally.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>