VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

The VMware vRealize Automation 7.x SLES Security Technical Implementation Guide (V2 R2) has 209 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

209STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Oct 25 2023 What changed in V2R2

The alias files must be owned by root.

VMware vRealize Automation 7.x SLES Security Technical Implementation Guide

Assessment Title

Rule Text

The alias files must be owned by root.

Description

Discussion Text

If the alias and aliases.db files are not owned by root, an unauthorized user may modify the file to add aliases to run malicious code or redirect email.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-240433

Rule

SV-240433r671040_rule

Severity

medium

Rule Version

VRAU-SL-000560

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the ownership of the alias file:

# ls -lL /etc/aliases
# ls -lL /etc/aliases.db

If all the files are not owned by "root", this is a finding.

Implementation Procedure

Fix Text

Change the owner of the alias files to "root":

# chown root /etc/aliases
# chown root /etc/aliases.db

STIG check 77 of 209 in the VMware vRealize Automation 7.x SLES STIG checklist

← Previous · V-240432Mail relaying must be restricted.Next · V-240434 →The alias files must be group-owned by root or a system group.