The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.
An XCCDF Rule
Description
SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
- ID
- SV-256388r959010_rule
- Version
- ESXI-70-000016
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
From an ESXi shell, add or correct the following line in "/etc/ssh/sshd_config":
PermitUserEnvironment no