Skip to content
ATO Pathways
  Log In

VMware vSphere 7.0 Virtual Machine Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Unauthorized serial devices must be disconnected on the virtual machine (VM).

    &lt;VulnDiscussion&gt;Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Unauthorized USB devices must be disconnected on the virtual machine (VM).

    &lt;VulnDiscussion&gt;Ensure no device is connected to a virtual machine if it is not required. For example, floppy, serial, and parallel ports are...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Console connection sharing must be limited on the virtual machine (VM).

    &lt;VulnDiscussion&gt;By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each t...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Informational messages from the virtual machine to the VMX file must be limited on the virtual machine (VM).

    &lt;VulnDiscussion&gt;The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the gue...
    Rule Low Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Unauthorized removal, connection, and modification of devices must be prevented on the virtual machine (VM).

    &lt;VulnDiscussion&gt;In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • The virtual machine (VM) must not be able to obtain host information from the hypervisor.

    &lt;VulnDiscussion&gt;If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This ...
    Rule Medium Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Shared salt values must be disabled on the virtual machine (VM).

    &lt;VulnDiscussion&gt;When salting is enabled (Mem.ShareForceSalting=1 or 2) to share a page between two virtual machines, both salt and the conten...
    Rule Low Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Access to virtual machines (VMs) through the "dvfilter" network Application Programming Interface (API) must be controlled.

    &lt;VulnDiscussion&gt;An attacker might compromise a VM by using the "dvFilter" API. Configure only VMs that need this access to use the API.&lt;/V...
    Rule Low Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • System administrators must use templates to deploy virtual machines (VMs) whenever possible.

    &lt;VulnDiscussion&gt;Capture a hardened base operating system image (with no applications installed) in a template to ensure all VMs are created w...
    Rule Low Severity
    Show

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
    Show

  • Use of the virtual machine (VM) console must be minimized.

    &lt;VulnDiscussion&gt;The VM console enables a connection to the console of a virtual machine, in effect seeing what a monitor on a physical server...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules