Skip to content
ATO Pathways
  Log In

VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must enable the rsyslog service.

    &lt;VulnDiscussion&gt;Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common ...
    Rule Medium Severity
    Show

  • SRG-OS-000077-GPOS-00045

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must be configured to use the pam_pwhistory.so module.

    &lt;VulnDiscussion&gt;Password complexity, or strength, is a measure of the effectiveness of a password in resisting attempts at guessing and brute...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must enable hardlink access control protection in the kernel.

    &lt;VulnDiscussion&gt;By enabling the fs.protected_hardlinks kernel parameter, users can no longer create soft or hard links to files they do not o...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00227

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must restrict core dumps.

    &lt;VulnDiscussion&gt;By enabling the fs.suid_dumpable kernel parameter, core dumps are not generated for setuid or otherwise protected/tainted bin...
    Rule Medium Severity
    Show

  • SRG-OS-000363-GPOS-00150

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must configure AIDE to detect changes to baseline configurations.

    &lt;VulnDiscussion&gt;Unauthorized changes to the baseline configuration could make the system vulnerable to various attacks or allow unauthorized ...
    Rule Medium Severity
    Show

  • SRG-OS-000480-GPOS-00226

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Photon operating system must not allow empty passwords.

    &lt;VulnDiscussion&gt;Accounts with empty or no passwords allow anyone to log on as that account without specifying a password or other forms of au...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules