STIGQter: STIG Summary: VMware vRealize Automation 7.x Lighttpd Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

Lighttpd audit records must be mapped to a time stamp.

DISA Rule

SV-99951r1_rule

Vulnerability Number

V-89301

Group Title

SRG-APP-000374-WSR-000172

Rule Version

VRAU-LI-000415

Severity

CAT II

CCI(s)

• CCI-001890 - The information system records time stamps for audit records that can be mapped to Coordinated Universal Time (UTC) or Greenwich Mean Time (GMT).

Weight

10

Fix Recommendation

Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf

Note: If the accesslog.format setting was commented out with a '#' sign, remove the '#' sign.

Configure the lighttpd.conf file with the following:

accesslog.format = "%h %l %u %t \"%r\" %b %>s \"%{User-Agent}i\" \"%{Referer}i\""

Check Contents

At the command prompt, execute the following command:

grep 'accesslog.format' /opt/vmware/etc/lighttpd/lighttpd.conf | grep -v ^#

If no value is returned or if the "accesslog.format" is commented out, this is a finding.

Vulnerability Number

V-89301

Documentable

False

Rule Version

VRAU-LI-000415

Severity Override Guidance

At the command prompt, execute the following command:

grep 'accesslog.format' /opt/vmware/etc/lighttpd/lighttpd.conf | grep -v ^#

If no value is returned or if the "accesslog.format" is commented out, this is a finding.

Check Content Reference

M

Target Key

3457

Comments