User start-up files must not contain the mesg -y or mesg y command.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
GEN001960-ESXI5-PNF	GEN001960-ESXI5-PNF	GEN001960-ESXI5-PNF_rule		Low

Description
The mesg -y or mesg y command turns on terminal messaging. On systems that do not default to mesg -n, the system profile (or equivalent) provides it. If the user changes this setting, write access may be provided to the terminal screen which could disrupt processing or cause enough confusion to result in damage to sensitive files. Educate users about the danger of having terminal messaging set on. Applicable, but permanent not-a-finding - no mesg command.

Description

The mesg -y or mesg y command turns on terminal messaging. On systems that do not default to mesg -n, the system profile (or equivalent) provides it. If the user changes this setting, write access may be provided to the terminal screen which could disrupt processing or cause enough confusion to result in damage to sensitive files. Educate users about the danger of having terminal messaging set on. Applicable, but permanent not-a-finding - no mesg command.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-GEN001960-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-GEN001960-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.