STIGQter: STIG Summary: Nutanix Acropolis Application Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AOS must be configured to protect the application server log files from unauthorized access.

DISA Rule

SV-279427r1191067_rule

Vulnerability Number

V-279427

Group Title

SRG-APP-000118-AS-000078

Rule Version

NXAC-AS-000020

Severity

CAT II

CCI(s)

• CCI-000162 - Protect audit information from unauthorized access.
• CCI-000163 - Protect audit information from unauthorized modification.
• CCI-000164 - Protect audit information from unauthorized deletion.

Weight

10

Fix Recommendation

Configure the Nutanix VM application server Prism Element log file permissions.

1. Run the following command:

$ sudo salt-call state.sls security/CVM/interactivenutanixCVM

2. For Prism Central, run the following command:

$ sudo salt-call state.sls security/PCVM/interactivenutanixPCVM

3. For Files, run the following command:

$ sudo salt-call state.sls security/AFS/interactivenutanixAFS

Check Contents

Confirm the Nutanix VM application server log files are protected from unauthorized read access.

The Nutanix AOS log files are owned by the Nutanix user and have a file permission of "640".

1. Identify the actual file name by looking at alert_manager.INFO, which is a symlink for the actual rotating file name.

$ sudo ls -al /home/nutanix/data/logs/alert_manager.INFO
lrwxrwxrwx. 1 nutanix nutanix 75 Nov 1 17:50 /home/nutanix/data/logs/alert_manager.INFO -> alert_manager.ntnx-<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>

2. Execute a stat command on the actual application server log file name.

$ sudo stat -c "%a %n" /home/nutanix/data/logs/alert_manager.ntnx-<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>
640 /home/nutanix/data/logs/alert_manager.ntnx<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>

If the output of the actual log file name is not 640, this is a finding.

Vulnerability Number

V-279427

Documentable

False

Rule Version

NXAC-AS-000020

Severity Override Guidance

Confirm the Nutanix VM application server log files are protected from unauthorized read access.

The Nutanix AOS log files are owned by the Nutanix user and have a file permission of "640".

1. Identify the actual file name by looking at alert_manager.INFO, which is a symlink for the actual rotating file name.

$ sudo ls -al /home/nutanix/data/logs/alert_manager.INFO
lrwxrwxrwx. 1 nutanix nutanix 75 Nov 1 17:50 /home/nutanix/data/logs/alert_manager.INFO -> alert_manager.ntnx-<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>

2. Execute a stat command on the actual application server log file name.

$ sudo stat -c "%a %n" /home/nutanix/data/logs/alert_manager.ntnx-<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>
640 /home/nutanix/data/logs/alert_manager.ntnx<CVM_NAME>.nutanix.log.INFO.<LOG_NUMBER>

If the output of the actual log file name is not 640, this is a finding.

Check Content Reference

M

Target Key

5729