The SSH daemon must set a timeout interval on idle sessions.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63223	ESXI-06-000027	SV-77713r1_rule		Low

Description
Causing idle users to be automatically logged out guards against compromises one system leading trivially to compromises on another.

STIG	Date
VMware vSphere ESXi 6.0 Security Technical Implementation Guide	2019-01-04

Details

Check Text ( C-63957r1_chk )
To verify the ClientAliveInterval setting, run the following command: # grep -i "^ClientAliveInterval" /etc/ssh/sshd_config If there is no output or the output is not exactly "ClientAliveInterval 200", this is a finding.

Fix Text (F-69141r1_fix)
To set the ClientAliveInterval setting, add or correct the following line in "/etc/ssh/sshd_config": ClientAliveInterval 200