STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must implement discretionary access controls to allow VMM admins to change security attributes on users, guest VMs, the VMM, or the VMMs components.

DISA Rule

SV-207443r958702_rule

Vulnerability Number

V-207443

Group Title

SRG-OS-000312

Rule Version

SRG-OS-000312-VMM-001130

Severity

CAT II

CCI(s)

• CCI-002165 - Enforce organization-defined discretionary access control policies over defined subjects and objects.

Weight

10

Fix Recommendation

Configure the VMM to implement discretionary access controls to allow VMM admins to change security attributes on users, guest VMs, the VMM, or the VMM's components.

Check Contents

Verify the VMM implements discretionary access controls to allow VMM admins to change security attributes on users, guest VMs, the VMM, or the VMM's components.

If it does not, this is a finding.

Vulnerability Number

V-207443

Documentable

False

Rule Version

SRG-OS-000312-VMM-001130

Severity Override Guidance

Verify the VMM implements discretionary access controls to allow VMM admins to change security attributes on users, guest VMs, the VMM, or the VMM's components.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924