STIGQter STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 30 Jan 2025:

The Photon operating system package files must not be modified.

DISA Rule

SV-256525r991567_rule

Vulnerability Number

V-256525

Group Title

SRG-OS-000278-GPOS-00108

Rule Version

PHTN-30-000051

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

If the audit system binaries have been altered, the system must be taken offline and the information system security manager (ISSM) notified immediately.

Reinstalling the audit tools is not supported. The appliance should be restored from a backup or redeployed once the root cause is remediated.

Check Contents

Use the verification capability of rpm to check the MD5 hashes of the audit files on disk versus the expected ones from the installation package.

At the command line, run the following command:

# rpm -V audit | grep "^..5" | grep -v "^...........c"

If there is any output, this is a finding.

Vulnerability Number

V-256525

Documentable

False

Rule Version

PHTN-30-000051

Severity Override Guidance

Use the verification capability of rpm to check the MD5 hashes of the audit files on disk versus the expected ones from the installation package.

At the command line, run the following command:

# rpm -V audit | grep "^..5" | grep -v "^...........c"

If there is any output, this is a finding.

Check Content Reference

M

Target Key

5520