STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix OS must remove all software components after updated versions have been installed.

DISA Rule

SV-279633r1192521_rule

Vulnerability Number

V-279633

Group Title

SRG-OS-000437-GPOS-00194

Rule Version

NXAC-OS-000212

Severity

CAT II

CCI(s)

• CCI-002617 - Remove previous versions of organization-defined software components after updated versions have been installed.

Weight

10

Fix Recommendation

Configure Yum settings to remove all software components after an updated version is installed.

1. Configure AOS Yum settings using the following command.

$ sudo salt-call state.sls security/CVM/yumCVM

2. Configure Prism Central Yum settings using the following command.

$ sudo salt-call state.sls security/PCVM/yumPCVM

3. Configure Files Yum settings using the following command.

$ sudo salt-call state.sls security/AFS/yumAFS

4. Configure AHV Yum settings using the following command.

$ sudo salt-call state.sls security/KVM/yumKVM

Check Contents

Verify Nutanix OS removes all software components after updated versions have been installed using the following command.

$ sudo grep -i clean_requirements_on_remove /etc/yum.conf
clean_requirements_on_remove=1

If "clean_requirements_on_remove" is not set to "1", "True", or "yes", or is not set in "/etc/yum.conf", this is a finding.

Vulnerability Number

V-279633

Documentable

False

Rule Version

NXAC-OS-000212

Severity Override Guidance

Verify Nutanix OS removes all software components after updated versions have been installed using the following command.

$ sudo grep -i clean_requirements_on_remove /etc/yum.conf
clean_requirements_on_remove=1

If "clean_requirements_on_remove" is not set to "1", "True", or "yes", or is not set in "/etc/yum.conf", this is a finding.

Check Content Reference

M

Target Key

5730