What changed in VMware vRealize Automation 7.x SLES STIG V2R2V2R2 changes

VMware vRealize Automation 7.x SLES STIG V2R2 (2023-10-25) replaced V2R1 (2021-07-23): 15 checks added, 14 removed. It has 209 checks, against 208 in V2R1.

V2R2 checklistV2R1 checklist Compare V2R1 and V2R2 in STIG Compare

  • 15 added
  • 14 removed
  • 0 updated

Added in V2R2 (15)

  • V-258447CAT IThe version of vRealize Automation 7.x SLES running on the system must be a supported version.
  • V-258526CAT IIAny publically accessible connection to the SLES for vRealize must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.
  • V-258527CAT IIThe SLES for vRealize audit system must be configured to audit all administrative, privileged, and security actions.
  • V-258528CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through adjtimex.
  • V-258529CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through settimeofday.
  • V-258530CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through stime.
  • V-258531CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through clock_settime.
  • V-258532CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through /etc/localtime.
  • V-258533CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sethostname.
  • V-258534CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through setdomainname.
  • V-258535CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sched_setparam.
  • V-258536CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sched_setscheduler.
  • V-258537CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/faillog.
  • V-258538CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/lastlog.
  • V-258539CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/tallylog.

Removed since V2R1 (14)

  • V-240363CAT IIThe SLES for vRealize audit system must be configured to audit all administrative, privileged, and security actions.
  • V-240364CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through adjtimex.
  • V-240365CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through settimeofday.
  • V-240366CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through stime.
  • V-240367CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through clock_settime.
  • V-240368CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter system time through /etc/localtime.
  • V-240369CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sethostname.
  • V-240370CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through setdomainname.
  • V-240371CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sched_setparam.
  • V-240372CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter the system through sched_setscheduler.
  • V-240373CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/faillog.
  • V-240374CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/lastlog.
  • V-240375CAT IIThe SLES for vRealize audit system must be configured to audit all attempts to alter /var/log/tallylog.
  • V-240481CAT IIAny publically accessible connection to the SLES for vRealize must display the Standard Mandatory DoD Notice and Consent Banner before granting access to the system.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V2R2 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.