VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

The VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide (V2 R2) has 212 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

212STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Oct 25 2023 What changed in V2R2

The yast2-tftp-server package must not be installed.

VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

Assessment Title

Rule Text

The yast2-tftp-server package must not be installed.

Description

Discussion Text

Removing the "yast2-tftp-server" package decreases the risk of the accidental (or intentional) activation of tftp services.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239515

Rule

SV-239515r661996_rule

Severity

medium

Rule Version

VROM-SL-000470

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check if "yast2-tftp-server" package is installed:

# rpm -q yast2-tftp-server

If there is a "yast2-tftp-server" package listed, this is a finding.

Implementation Procedure

Fix Text

To remove the "yast2-tftp-server" package use the following command:

rpm -e yast2-tftp-server

STIG check 62 of 212 in the VMware vRealize Operations Manager 6.x SLES STIG checklist

← Previous · V-239514The ypserv package must not be installed.Next · V-239516 →The Datagram Congestion Control Protocol (DCCP) must be disabled unless required.