III - Administrative Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000480-VMM-002000
Group -
The virtual machine (VM) must not be able to obtain host information from the hypervisor.
If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this informat...Rule Medium Severity -
SRG-OS-000480-VMM-002000
Group -
Shared salt values must be disabled on the virtual machine (VM).
When salting is enabled (Mem.ShareForceSalting=1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced opti...Rule Low Severity -
SRG-OS-000480-VMM-002000
Group -
Access to virtual machines (VMs) through the "dvfilter" network Application Programming Interface (API) must be controlled.
An attacker might compromise a VM by using the "dvFilter" API. Configure only VMs that need this access to use the API.Rule Low Severity -
SRG-OS-000480-VMM-002000
Group -
System administrators must use templates to deploy virtual machines (VMs) whenever possible.
Capture a hardened base operating system image (with no applications installed) in a template to ensure all VMs are created with a known baseline level of security. Use this template to create othe...Rule Low Severity -
SRG-OS-000480-VMM-002000
Group -
Use of the virtual machine (VM) console must be minimized.
The VM console enables a connection to the console of a virtual machine, in effect seeing what a monitor on a physical server would show. The VM console also provides power management and removable...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.