STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AHV must disable network management of the chrony daemon.

DISA Rule

SV-279570r1192430_rule

Vulnerability Number

V-279570

Group Title

SRG-OS-000095-GPOS-00049

Rule Version

NXAC-OS-000101

Severity

CAT II

CCI(s)

• CCI-000381 - Configure the system to provide only organization-defined mission essential capabilities.

Weight

10

Fix Recommendation

Configure the AHV to disable network management of the chrony daemon by adding or modifying the following line in the "/etc/chrony.conf" file:

cmdport 0

Check Contents

For AOS, Prism Central, or Files, this is not a finding.

Verify Nutanix AHV disables network management of the chrony daemon using the following command.

$ sudo grep -w 'cmdport' /etc/chrony.conf
cmdport 0

If the "cmdport" option is not set to "0", is commented out, or missing, this is a finding.

Vulnerability Number

V-279570

Documentable

False

Rule Version

NXAC-OS-000101

Severity Override Guidance

For AOS, Prism Central, or Files, this is not a finding.

Verify Nutanix AHV disables network management of the chrony daemon using the following command.

$ sudo grep -w 'cmdport' /etc/chrony.conf
cmdport 0

If the "cmdport" option is not set to "0", is commented out, or missing, this is a finding.

Check Content Reference

M

Target Key

5730