STIGQter: STIG Summary: VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 09 Mar 2021:

Performance Charts must properly configure log sizes and rotation.

DISA Rule

SV-239427r675004_rule

Vulnerability Number

V-239427

Group Title

SRG-APP-000357-WSR-000150

Rule Version

VCPF-67-000026

Severity

CAT II

CCI(s)

• CCI-001849 - The organization allocates audit record storage capacity in accordance with organization-defined audit record storage requirements.

Weight

10

Fix Recommendation

Open  /etc/vmware-perfcharts/log4j.properties with a text editor and add or change the following settings:

log4j.appender.LOGFILE.MaxFileSize=5MB
log4j.appender.LOGFILE.MaxBackupIndex=10

Check Contents

At the command prompt, execute the following command:

# grep -i "max" /etc/vmware-perfcharts/log4j.properties

Expected result:

log4j.appender.LOGFILE.MaxFileSize=5MB
log4j.appender.LOGFILE.MaxBackupIndex=10

If the output of the command does not match the expected result, this is a finding.

Vulnerability Number

V-239427

Documentable

False

Rule Version

VCPF-67-000026

Severity Override Guidance

At the command prompt, execute the following command:

# grep -i "max" /etc/vmware-perfcharts/log4j.properties

Expected result:

log4j.appender.LOGFILE.MaxFileSize=5MB
log4j.appender.LOGFILE.MaxBackupIndex=10

If the output of the command does not match the expected result, this is a finding.

Check Content Reference

M

Target Key

5329

Comments