UCF STIG Viewer Logo

The root accounts executable search path must be the vendor default and must contain only absolute paths.


Overview

Finding ID Version Rule ID IA Controls Severity
V-39273 GEN000940-ESXI5-000042 SV-51089r1_rule Medium
Description
The executable search path (typically the PATH environment variable) contains a list of directories for the shell to search to find executables. If this path includes the current working directory or other relative paths, executables in these directories may be executed instead of system commands. This variable is formatted as a colon-separated list of directories. If there is an empty entry, such as a leading or trailing colon or two consecutive colons, this is interpreted as the current working directory. Entries starting with a slash (/) are absolute paths.
STIG Date
VMware ESXi Server 5.0 Security Technical Implementation Guide 2017-01-06

Details

Check Text ( C-46537r5_chk )
Disable lock down mode.
Enable the ESXi Shell.
= /etc/profile
= PATH
= /bin:/sbin
Execute the following command(s):
# grep PATH /etc/profile

If the "PATH" is not set to "/bin:/sbin", this is a finding.

Re-enable lock down mode.
Fix Text (F-44252r5_fix)
Disable lock down mode.
Enable the ESXi Shell.
= /etc/profile
= PATH
= /bin:/sbin
Execute the following command(s):
# vi /etc/profile

Set the "PATH" to "/bin:/sbin".

Re-enable lock down mode.