III - Administrative Classified
Rules and Groups employed by this XCCDF Profile
-
SRG-OS-000480-VMM-002000
Group -
Virtual machines (VMs) must limit console sharing.
By default, more than one user at a time can connect to remote console sessions. When multiple sessions are activated, each terminal window receives a notification about the new session. If an admi...Rule Medium Severity -
SRG-OS-000480-VMM-002000
Group -
Virtual machines (VMs) must limit informational messages from the virtual machine to the VMX file.
The configuration file containing these name-value pairs is limited to a size of 1MB. If not limited, VMware tools in the guest operating system are capable of sending a large and continuous data s...Rule Low Severity -
SRG-OS-000480-VMM-002000
Group -
Virtual machines (VMs) must prevent unauthorized removal, connection, and modification of devices.
In a virtual machine, users and processes without root or administrator privileges can connect or disconnect devices, such as network adaptors and CD-ROM drives, and can modify device settings. Use...Rule Medium Severity -
SRG-OS-000480-VMM-002000
Group -
Virtual machines (VMs) must not be able to obtain host information from the hypervisor.
If enabled, a VM can obtain detailed information about the physical host. The default value for the parameter is FALSE. This setting should not be TRUE unless a particular VM requires this informat...Rule Medium Severity -
SRG-OS-000480-VMM-002000
Group -
Virtual machines (VMs) must have shared salt values disabled.
When salting is enabled (Mem.ShareForceSalting=1 or 2) to share a page between two virtual machines, both salt and the content of the page must be same. A salt value is a configurable advanced opti...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.