STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

The Photon operating system must reveal error messages only to authorized users.

DISA Rule

SV-258832r933557_rule

Vulnerability Number

V-258832

Group Title

SRG-OS-000206-GPOS-00084

Rule Version

PHTN-40-000074

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Navigate to and open:

/etc/rsyslog.conf

Add or update the following line:

$umask 0037

At the command line, run the following command:

# systemctl restart rsyslog.service

Check Contents

If another package is used to offload logs, such as syslog-ng, and is properly configured, this is not applicable.

At the command line, run the following command to verify rsyslog generates log files that are not world readable:

# grep '^\$umask' /etc/rsyslog.conf

Example result:

$umask 0037

If "$umask" is not set to "0037" or more restrictive, this is a finding.

Vulnerability Number

V-258832

Documentable

False

Rule Version

PHTN-40-000074

Severity Override Guidance

If another package is used to offload logs, such as syslog-ng, and is properly configured, this is not applicable.

At the command line, run the following command to verify rsyslog generates log files that are not world readable:

# grep '^\$umask' /etc/rsyslog.conf

Example result:

$umask 0037

If "$umask" is not set to "0037" or more restrictive, this is a finding.

Check Content Reference

M

Target Key

5569