STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The SLES for vRealize must initiate session audits at system start-up.

DISA Rule

SV-99281r1_rule

Vulnerability Number

V-88631

Group Title

SRG-OS-000254-GPOS-00095

Rule Version

VROM-SL-000870

Severity

CAT II

CCI(s)

CCI-001464 - The information system initiates session audits at system start-up.

Weight

Fix Recommendation

Edit the grub bootloader file "/boot/grub/menu.lst" by appending the "audit=1" parameter to the kernel boot line.

Reboot the system for the change to take effect.

Check Contents

Check for the "audit=1" kernel parameter.

# grep "audit=1" /proc/cmdline

If no results are returned, this is a finding.

Vulnerability Number

V-88631

Documentable

False

Rule Version

VROM-SL-000870

Severity Override Guidance

Check for the "audit=1" kernel parameter.

# grep "audit=1" /proc/cmdline

If no results are returned, this is a finding.

Check Content Reference

Target Key

3461

The SLES for vRealize must initiate session audits at system start-up.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments