Skip to content
ATO Pathways
  Log In

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000064-GPOS-00033

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing the full-text recording of successful and unsuccessful uses and variations of the open-related privileged commands.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000064-GPOS-00033

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing the full-text recording of successful and unsuccessful uses and variations of the truncate-related privileged commands.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to es...
    Rule Medium Severity
    Show

  • SRG-OS-000458-GPOS-00203

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for file access actions.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000458-GPOS-00203

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for file ownership actions.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000458-GPOS-00203

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for file permission actions.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000458-GPOS-00203

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for file extended attribute actions.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000461-GPOS-00205

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to access categories of information (e.g., classification levels) occur.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000462-GPOS-00206

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify privileges occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000463-GPOS-00207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify security objects occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000465-GPOS-00209

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify categories of information occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000466-GPOS-00210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must audit attempts to modify or delete security objects.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000470-GPOS-00214

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful logon attempts occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000471-GPOS-00215

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for privileged security activities.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000471-GPOS-00215

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for privileged account activities.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
    Show

  • SRG-OS-000062-GPOS-00031

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must be configured to audit the loading and unloading of dynamic kernel modules.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000473-GPOS-00218

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when concurrent logons to the same account occur from different sources.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000474-GPOS-00219

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records when successful/unsuccessful accesses to objects occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000472-GPOS-00217

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for all direct access to the information system.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000476-GPOS-00221

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must generate audit records for all account creations, modifications, disabling, and termination events.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
    Show

  • SRG-OS-000254-GPOS-00095

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must initiate session audits at system start-up.

    &lt;VulnDiscussion&gt;If auditing is enabled late in the start-up process, the actions of some start-up processes may not be audited. Some audit sy...
    Rule Medium Severity
    Show

  • SRG-OS-000037-GPOS-00015

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing information to establish what type of events occurred.

    &lt;VulnDiscussion&gt;Without establishing what type of events occurred, it would be difficult to establish, correlate, and investigate the events ...
    Rule Medium Severity
    Show

  • SRG-OS-000038-GPOS-00016

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing information to establish when events occurred.

    &lt;VulnDiscussion&gt;Without establishing when events occurred, it is impossible to establish, correlate, and investigate the events leading up to...
    Rule Medium Severity
    Show

  • SRG-OS-000039-GPOS-00017

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing the full-text recording of successful and unsuccessful attempts to execute the chage privileged command.

    &lt;VulnDiscussion&gt;Reconstruction of harmful events or forensic analysis is not possible if audit records do not contain enough information. At...
    Rule Medium Severity
    Show

  • SRG-OS-000042-GPOS-00020

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing information to establish where events occurred.

    &lt;VulnDiscussion&gt;Without establishing where events occurred, it is impossible to establish, correlate, and investigate the events leading up t...
    Rule Medium Severity
    Show

  • SRG-OS-000040-GPOS-00018

    <GroupDescription></GroupDescription>
    Group
    Show

  • Nutanix AOS must produce audit records containing information to establish the source of events.

    &lt;VulnDiscussion&gt;Without establishing the source of the event, it is impossible to establish, correlate, and investigate the events leading up...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules