STIGQter: STIG Summary: VMware vRealize Automation 7.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must generate log records for system startup and shutdown.

DISA Rule

SV-100567r1_rule

Vulnerability Number

V-89917

Group Title

SRG-APP-000089-WSR-000047

Rule Version

VRAU-TC-000105

Severity

CAT II

CCI(s)

• CCI-000169 - The information system provides audit record generation capability for the auditable events defined in AU-2 a. at organization-defined information system components.

Weight

10

Fix Recommendation

Navigate to and open /usr/share/tomcat/bin/catalina.sh.

Navigate to and locate the start block : "elif [ "$1" = "start" ] ; then"

Navigate to and locate both "eval" statements : "org.apache.catalina.startup.Bootstrap "$@" start \"

Add this statement immediately below both of the "eval" statements : '>> "$CATALINA_OUT" 2>&1 "&"'

Check Contents

At the command prompt, execute the following command:

more /storage/log/vmware/vco/app-server/catalina.out

Verify that tc Server start and stop events are being logged.

If the tc Server start and stop events are not being recorded, this is a finding.

Note: The tc Server service is referred to as Catalina in the log.

Vulnerability Number

V-89917

Documentable

False

Rule Version

VRAU-TC-000105

Severity Override Guidance

At the command prompt, execute the following command:

more /storage/log/vmware/vco/app-server/catalina.out

Verify that tc Server start and stop events are being logged.

If the tc Server start and stop events are not being recorded, this is a finding.

Note: The tc Server service is referred to as Catalina in the log.

Check Content Reference

M

Target Key

3439

Comments