VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

The VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide (V2 R2) has 212 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

212STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Oct 25 2023 What changed in V2R2

The SLES for vRealize must have USB Mass Storage disabled unless needed.

VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

Assessment Title

Rule Text

The SLES for vRealize must have USB Mass Storage disabled unless needed.

Description

Discussion Text

USB is a common computer peripheral interface. USB devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239510

Rule

SV-239510r661981_rule

Severity

medium

Rule Version

VROM-SL-000445

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If SLES for vRealize needs USB storage, this vulnerability is not applicable.

Check if the "usb-storage" module is prevented from loading:

# grep "install usb-storage /bin/true" /etc/modprobe.conf /etc/modprobe.conf.local /etc/modprobe.d/*

If no results are returned, this is a finding.

Implementation Procedure

Fix Text

Prevent the "usb-storage" module from loading:

# echo "install usb-storage /bin/true" >> /etc/modprobe.conf.local

STIG check 57 of 212 in the VMware vRealize Operations Manager 6.x SLES STIG checklist

← Previous · V-239509The Bluetooth protocol handler must be disabled or not installed.Next · V-239511 →The SLES for vRealize must have USB disabled unless needed.