VMware ESX 3 Server

The VMware ESX 3 Server (V1 R2) has 630 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

630STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Jul 22 2016

If LILO is the authorized boot loader for the system, a global password must be defined in /etc/lilo.conf.

VMware ESX 3 Server

Assessment Title

Rule Text

If LILO is the authorized boot loader for the system, a global password must be defined in /etc/lilo.conf.

Description

Discussion Text

If LILO has been approved for use, it must be password protected to prevent malicious booting into single user mode and to prevent booting of an insecure operating system.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-4252

Rule

SV-4252r2_rule

Severity

high

Rule Version

GEN000000-LNX00180

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check for the password to precede the first image stanza in /etc/lilo.conf:

   #   more /etc/lilo.conf

password=""
         image=/boot/vmlinuz-2.4.20-6smp

If a password is not found, then this is a finding.

Implementation Procedure

Fix Text

Password protect LILO by including the password=password line to the global section of /etc/lilo.conf.

STIG check 432 of 630 in the VMware ESX 3 Server STIG checklist

← Previous · V-4250The system's boot loader configuration file(s) must have mode 0600 or less permissive.Next · V-4253 →The /etc/lilo.conf file must have mode 0600 or less permissive.