Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
  • The virtual machine (VM) must not be able to obtain host information from the hypervisor.

    &lt;VulnDiscussion&gt;If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This ...
    Rule Medium Severity
  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
  • Shared salt values must be disabled on the virtual machine (VM).

    &lt;VulnDiscussion&gt;When salting is enabled (Mem.ShareForceSalting=1 or 2) to share a page between two virtual machines, both salt and the conten...
    Rule Low Severity
  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
  • Access to virtual machines (VMs) through the "dvfilter" network Application Programming Interface (API) must be controlled.

    &lt;VulnDiscussion&gt;An attacker might compromise a VM by using the "dvFilter" API. Configure only VMs that need this access to use the API.&lt;/V...
    Rule Low Severity
  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
  • System administrators must use templates to deploy virtual machines (VMs) whenever possible.

    &lt;VulnDiscussion&gt;Capture a hardened base operating system image (with no applications installed) in a template to ensure all VMs are created w...
    Rule Low Severity
  • SRG-OS-000480-VMM-002000

    <GroupDescription></GroupDescription>
    Group
  • Use of the virtual machine (VM) console must be minimized.

    &lt;VulnDiscussion&gt;The VM console enables a connection to the console of a virtual machine, in effect seeing what a monitor on a physical server...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules