STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users).

DISA Rule

SV-279600r1192481_rule

Vulnerability Number

V-279600

Group Title

SRG-OS-000104-GPOS-00051

Rule Version

NXAC-OS-000154

Severity

CAT II

CCI(s)

• CCI-000764 - Uniquely identify and authenticate organizational users and associate that unique identification with processes acting on behalf of those users.

Weight

10

Fix Recommendation

Nutanix OS is a purpose-built OS that comes with the account of last resort and system accounts needed. All user accounts required for the proper functionality of the OS are present.

If any additional accounts are found on the system, corruption may have occurred and the OS must be rebuilt.

Check Contents

Verify Nutanix OS contains no duplicate User IDs (UIDs) for interactive users using the following command.

awk -F ":" 'list[$3]++{print $1, $3}' /etc/passwd

If any output is returned, this is a finding.

Vulnerability Number

V-279600

Documentable

False

Rule Version

NXAC-OS-000154

Severity Override Guidance

Verify Nutanix OS contains no duplicate User IDs (UIDs) for interactive users using the following command.

awk -F ":" 'list[$3]++{print $1, $3}' /etc/passwd

If any output is returned, this is a finding.

Check Content Reference

M

Target Key

5730