The SSH daemon must not permit root logins.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63197	ESXI-06-000014	SV-77687r1_rule		Low

Description
Permitting direct root login reduces auditable information about who ran privileged commands on the system and also allows direct attack attempts on root's password.

STIG	Date
VMware vSphere ESXi 6.0 Security Technical Implementation Guide	2019-01-04

Details

Check Text ( C-63931r1_chk )
To verify how the SSH daemon's "PermitRootLogin" option is set, run the following command: # grep -i "^PermitRootLogin" /etc/ssh/sshd_config If there is no output or the output is not exactly "PermitRootLogin no", this is a finding.

Fix Text (F-69115r1_fix)
The root user should never be allowed to log in to a system directly over a network. Add or correct the following line in "/etc/ssh/sshd_config": PermitRootLogin no