Skip to content

Nutanix AOS 5.20.x OS Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000458-GPOS-00203

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records for file extended attribute actions.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
  • SRG-OS-000461-GPOS-00205

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to access categories of information (e.g., classification levels) occur.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
  • SRG-OS-000462-GPOS-00206

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify privileges occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
  • SRG-OS-000463-GPOS-00207

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify security objects occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
  • SRG-OS-000465-GPOS-00209

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records when successful/unsuccessful attempts to modify categories of information occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
  • SRG-OS-000466-GPOS-00210

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must audit attempts to modify or delete security objects.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
  • SRG-OS-000470-GPOS-00214

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records when successful/unsuccessful logon attempts occur.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity
  • SRG-OS-000471-GPOS-00215

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records for privileged security activities.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
  • SRG-OS-000471-GPOS-00215

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must generate audit records for privileged account activities.

    &lt;VulnDiscussion&gt;Without generating audit records that are specific to the security and mission needs of the organization, it would be difficu...
    Rule Medium Severity
  • SRG-OS-000062-GPOS-00031

    <GroupDescription></GroupDescription>
    Group
  • Nutanix AOS must be configured to audit the loading and unloading of dynamic kernel modules.

    &lt;VulnDiscussion&gt;Without generating audit records specific to the security and mission needs of the organization, it would be difficult to est...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules