The ESXi host Secure Shell (SSH) daemon must not permit user environment settings.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-256388 | SRG-OS-000480-VMM-002000 | ESXI-70-000016 | SV-256388r959010_rule | 2025-02-11 | 1 |
Description
SSH environment options potentially allow users to bypass access restriction in some configurations. Users must not be able to present environment options to the SSH daemon.
ℹ️ Check
From an ESXi shell, run the following command:
# /usr/lib/vmware/openssh/bin/sshd -T|grep permituserenvironment
Expected result:
permituserenvironment no
If the output does not match the expected result, this is a finding.
✔️ Fix
From an ESXi shell, add or correct the following line in "/etc/ssh/sshd_config":
PermitUserEnvironment no