STIGQter: STIG Summary: VMW vRealize Automation 7.x vAMI Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The vAMI configuration file must be owned by root.

DISA Rule

SV-100849r1_rule

Vulnerability Number

V-90199

Group Title

SRG-APP-000090-AS-000051

Rule Version

VRAU-VA-000055

Severity

CAT II

CCI(s)

• CCI-000171 - The information system allows organization-defined personnel or roles to select which auditable events are to be audited by specific components of the information system.

Weight

10

Fix Recommendation

At the command prompt, enter the following command:

chown root:root /opt/vmware/etc/sfcb/sfcb.cfg

Check Contents

At the command prompt, execute the following command:

ls -lL /opt/vmware/etc/sfcb/sfcb.cfg

If the sfcb.cfg file is not owned by root, this is a finding.

Vulnerability Number

V-90199

Documentable

False

Rule Version

VRAU-VA-000055

Severity Override Guidance

At the command prompt, execute the following command:

ls -lL /opt/vmware/etc/sfcb/sfcb.cfg

If the sfcb.cfg file is not owned by root, this is a finding.

Check Content Reference

M

Target Key

3449

Comments