Rotate your device back to portrait to use STIG Vault.
The Nutanix AOS 5.20.x OS Security Technical Implementation Guide (V1 R2) has 119 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.
Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Rule Text
Discussion Text
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.
Confirm Nutanix AOS does not allow users to override environment variables to the SSH daemon.
Check for the value of the "PermitUserEnvironment" keyword with the following command:
$ sudo grep -i permituserenvironment /etc/ssh/sshd_config
PermitUserEnvironment no
If the "PermitUserEnvironment" keyword is not set to "no", is missing, or is commented out, this is a finding.
$ sudo grep -i hostbasedauthentication /etc/ssh/sshd_config
HostbasedAuthentication no
If the "HostbasedAuthentication" keyword is not set to "no", is missing, or is commented out, this is a finding.
Configure Nutanix AOS to not allow users to override environment variables to the SSH daemon by running the following command.
$ sudo salt-call state.sls security/CVM/sshdCVM