The Photon operating system must disable the debug-shell service.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-256546 | SRG-OS-000480-GPOS-00227 | PHTN-30-000076 | SV-256546r991589_rule | 2024-12-16 | 1 |
| Description |
|---|
| The debug-shell service is intended to diagnose systemd-related boot issues with various "systemctl" commands. Once enabled and following a system reboot, the root shell will be available on tty9. This service must remain disabled until and unless otherwise directed by VMware support. |
| ℹ️ Check |
|---|
| At the command line, run the following command: # systemctl status debug-shell.service|grep -E --color=always disabled If the debug-shell service is not disabled, this is a finding. |
| ✔️ Fix |
|---|
| At the command line, run the following commands: # systemctl stop debug-shell.service # systemctl disable debug-shell.service Reboot for changes to take effect. |