VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

The VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide (V2 R2) has 212 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

212STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R2

CurrentPublished Wed Oct 25 2023 What changed in V2R2

The SLES for vRealize must have IEEE 1394 (Firewire) disabled unless needed.

VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide

Assessment Title

Rule Text

The SLES for vRealize must have IEEE 1394 (Firewire) disabled unless needed.

Description

Discussion Text

Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-239550

Rule

SV-239550r662101_rule

Severity

medium

Rule Version

VROM-SL-000655

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If SLES for vRealize needs IEEE 1394 (Firewire), this is not applicable.

Check if the firewire module is not disabled:

# grep "install ieee1394 /bin/true" /etc/modprobe.conf /etc/modprobe.conf.local /etc/modprobe.d/*

If no results are returned, this is a finding.

Implementation Procedure

Fix Text

Prevent SLES for vRealize from loading the firewire module:

# echo "install ieee1394 /bin/true" >> /etc/modprobe.conf.local

STIG check 97 of 212 in the VMware vRealize Operations Manager 6.x SLES STIG checklist

← Previous · V-239549The DHCP client must be disabled if not needed.Next · V-239551 →Duplicate User IDs (UIDs) must not exist for users within the organization.