I think that command only allow me to check on files on the DATA store. Is one example:
Rule Title: The SSH client must not send environment variables to the server or must only send those pertaining to locale.
STIG ID: GEN005529-ESXI5-708 Rule ID: SV-51085r1_rule Vuln ID: V-39269
Severity: CAT II Class: Unclass
Discussion:
Environment variables can be used to change the behavior of remote sessions and should be limited. Locale environment variables specify the language, character set, and other features modifying the operation of software to match the user's preferences.
Documentable: No
Check Content:
Disable lock down mode.
Enable the ESXi Shell.
<file> = /etc/ssh/ssh_config
<required_keyword> = AcceptEnv
<required_keyword_setpoint> = LOCALE
Execute the following command(s):
# grep AcceptEnv /etc/ssh/ssh_config
If "AcceptEnv" is not set to "LOCALE" this is a finding.
Re-enable lock down mode.
Fix Text:
Disable lock down mode.
Enable the ESXi Shell.
<file> = /etc/ssh/ssh_config
<required_keyword> = AcceptEnv
<required_keyword_setpoint> = LOCALE
Execute the following command(s):
# vi <file>
Add/modify the <required_keyword> and/or <required_keyword_setpoint> where/as required to "LOCALE".
Re-enable lock down mode.
CCI: CCI-000366
NIST SP 800-53A :: CM-6.1 (iv)
NIST SP 800-53 :: CM-6 b
I need to be able to browse to /etc/ssh/ssh_config file and check if certain condition apply. Datastore and the /host folder are the only two locations that can be access via Powershell or vCLI.
Thanks.. I didnt see the PowerCLI forum...
