STIGQter STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must limit the ability of nonprivileged users to grant other users direct access to the contents of their home directories/folders.

DISA Rule

SV-279585r1192452_rule

Vulnerability Number

V-279585

Group Title

SRG-OS-000312-GPOS-00123

Rule Version

NXAC-OS-000132

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

For AOS, Prism Central, and Files, configure any interactive users home directory to have a mode of 0750 or less using the following command.

$ sudo chmod 0750 [path to interactive user's home directory]

For AHV, this setting is a default setting set by the vendor and is not supported to be changed in the field. If any interactive user accounts exist then something has been modified and the hypervisor OS VM must be rebuilt from source.

Check Contents

Verify Nutanix OS has assigned home directory of all local interactive users has a mode of "0750" or less permissive using the following command.

$ ls -ld $(awk -F: '($3>=1000)&&($7 !~ /nologin/){print $6}' /etc/passwd)
drwxr-x---. 3 admin admin 4096 Nov 6 2020 /home/admin
drwxr-x---. 26 nutanix nutanix 4096 Aug 17 08:02 /home/nutanix

If home directories referenced in "/etc/passwd" do not have a mode of "0750" or less, this is a finding.

Vulnerability Number

V-279585

Documentable

False

Rule Version

NXAC-OS-000132

Severity Override Guidance

Verify Nutanix OS has assigned home directory of all local interactive users has a mode of "0750" or less permissive using the following command.

$ ls -ld $(awk -F: '($3>=1000)&&($7 !~ /nologin/){print $6}' /etc/passwd)
drwxr-x---. 3 admin admin 4096 Nov 6 2020 /home/admin
drwxr-x---. 26 nutanix nutanix 4096 Aug 17 08:02 /home/nutanix

If home directories referenced in "/etc/passwd" do not have a mode of "0750" or less, this is a finding.

Check Content Reference

M

Target Key

5730