← Back to Nutanix AOS 5.20.x OS Security Technical Implementation Guide

V-254196

CAT II (Medium)

Nutanix AOS must not allow an unattended or automatic logon to the system.

Rule ID

SV-254196r991591_rule

STIG

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

Failure to restrict system access to authenticated users negatively impacts operating system security.

Check Content

Confirm Nutanix AOS does not allow users to override environment variables to the SSH daemon.

Check for the value of the "PermitUserEnvironment" keyword with the following command:

$ sudo grep -i permituserenvironment /etc/ssh/sshd_config
PermitUserEnvironment no

If the "PermitUserEnvironment" keyword is not set to "no", is missing, or is commented out, this is a finding.

$ sudo grep -i hostbasedauthentication /etc/ssh/sshd_config
HostbasedAuthentication no

If the "HostbasedAuthentication" keyword is not set to "no", is missing, or is commented out, this is a finding.

Fix Text

Configure Nutanix AOS to not allow users to override environment variables to the SSH daemon by running the following command.

$ sudo salt-call state.sls security/CVM/sshdCVM