STIGQter: STIG Summary: VMware vSphere 7.0 vCenter Appliance Perfcharts Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 07 Mar 2023:

Performance Charts must properly configure log sizes and rotation.

DISA Rule

SV-256639r888408_rule

Vulnerability Number

V-256639

Group Title

SRG-APP-000357-WSR-000150

Rule Version

VCPF-70-000029

Severity

CAT II

CCI(s)

CCI-001849 - Allocate audit log storage capacity to accommodate organization-defined audit record retention requirements.

Weight

Fix Recommendation

Navigate to and open:

/etc/vmware-perfcharts/log4j.properties

Ensure the appender.rolling entries are configured as follows:

appender.rolling.type = RollingFile
appender.rolling.name = FileLog
appender.rolling.fileName = /var/log/vmware/perfcharts/stats.log
appender.rolling.filePattern = /var/log/vmware/perfcharts/stats-%i.log
appender.rolling.policies.type = Policies
appender.rolling.policies.size.type = SizeBasedTriggeringPolicy
appender.rolling.policies.size.size = 5MB
appender.rolling.strategy.type = DefaultRolloverStrategy
appender.rolling.strategy.max = 10
appender.rolling.layout.type = PatternLayout
appender.rolling.layout.pattern = %d{yyyy-MM-dd'T'HH:mm:ss.SSSXXX} [%t %-5p %c] %m%n
appender.rolling.level = info

Note: This fix is currently only applicable to 7.0 U2+ and is different in older versions.

Check Contents

At the command prompt, run the following command:

# rpm -V VMware-perfcharts|grep log4j|grep "^..5......"

If the command returns any output, this is a finding.

Vulnerability Number

V-256639

Documentable

False

Rule Version

VCPF-70-000029

Severity Override Guidance

At the command prompt, run the following command:

# rpm -V VMware-perfcharts|grep log4j|grep "^..5......"

If the command returns any output, this is a finding.

Check Content Reference

Target Key

5522