STIGQter STIGQter: STIG Summary: VMware vSphere 8.0 vCenter Appliance Photon OS 4.0 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 31 Oct 2023:

The Photon operating system must be configured so that the x86 Ctrl-Alt-Delete key sequence is disabled on the command line.

DISA Rule

SV-258885r933716_rule

Vulnerability Number

V-258885

Group Title

SRG-OS-000480-GPOS-00227

Rule Version

PHTN-40-000222

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

At the command line, run the following commands:

# systemctl disable ctrl-alt-del.target
# systemctl mask ctrl-alt-del.target
# systemctl daemon-reload

Check Contents

At the command line, run the following command to verify the ctrl-alt-del target is disabled and masked:

# systemctl status ctrl-alt-del.target --no-pager

Example output:

ctrl-alt-del.target
Loaded: masked (Reason: Unit ctrl-alt-del.target is masked.)
Active: inactive (dead)

If the "ctrl-alt-del.target" is not "inactive" and "masked", this is a finding.

Vulnerability Number

V-258885

Documentable

False

Rule Version

PHTN-40-000222

Severity Override Guidance

At the command line, run the following command to verify the ctrl-alt-del target is disabled and masked:

# systemctl status ctrl-alt-del.target --no-pager

Example output:

ctrl-alt-del.target
Loaded: masked (Reason: Unit ctrl-alt-del.target is masked.)
Active: inactive (dead)

If the "ctrl-alt-del.target" is not "inactive" and "masked", this is a finding.

Check Content Reference

M

Target Key

5569