STIGQter: STIG Summary: Virtual Machine Manager Security Requirements Guide Version: 2 Release: 4 Benchmark Date: 01 Jul 2026:

The VMM must implement discretionary access controls to allow VMM admins to choose the security attributes to be associated with newly created or revised guest VMs.

DISA Rule

SV-207444r958702_rule

Vulnerability Number

V-207444

Group Title

SRG-OS-000312

Rule Version

SRG-OS-000312-VMM-001140

Severity

CAT II

CCI(s)

• CCI-002165 - Enforce organization-defined discretionary access control policies over defined subjects and objects.

Weight

10

Fix Recommendation

Configure the VMM to implement discretionary access controls to allow VMM admins to choose the security attributes to be associated with newly created or revised guest VMs.

Check Contents

Verify the VMM implements discretionary access controls to allow VMM admins to choose the security attributes to be associated with newly created or revised guest VMs.

If it does not, this is a finding.

Vulnerability Number

V-207444

Documentable

False

Rule Version

SRG-OS-000312-VMM-001140

Severity Override Guidance

Verify the VMM implements discretionary access controls to allow VMM admins to choose the security attributes to be associated with newly created or revised guest VMs.

If it does not, this is a finding.

Check Content Reference

M

Target Key

2924