STIGQter: STIG Summary: Nutanix Acropolis GPOS Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Jan 2026:

Nutanix AHV must generate error messages that provide information necessary for corrective actions without revealing information that could be exploited by adversaries.

DISA Rule

SV-279667r1192524_rule

Vulnerability Number

V-279667

Group Title

SRG-OS-000205-GPOS-00083

Rule Version

NXAC-OS-000251

Severity

CAT II

CCI(s)

• CCI-001312 - Generates error messages that provide information necessary for corrective actions without revealing information that could be exploited.

Weight

10

Fix Recommendation

Configure Nutanix AHV to set permissions of all log files under the "/home/log" directory to "600" or more restricted using the following command.

$ sudo find /var/log -perm /137 -type f -exec chmod 600 '{}' \;

Check Contents

For AOS, Prism Central, and Files, this requirement is Inherently Met.

Confirm Nutanix AHV has all system log files under the "/var/log" directory with a permission of "600" using the following command.

$ sudo find /var/log -perm /137 -type f -exec stat -c "%n %a" {} \;

If command displays any output, this is a finding.

Vulnerability Number

V-279667

Documentable

False

Rule Version

NXAC-OS-000251

Severity Override Guidance

For AOS, Prism Central, and Files, this requirement is Inherently Met.

Confirm Nutanix AHV has all system log files under the "/var/log" directory with a permission of "600" using the following command.

$ sudo find /var/log -perm /137 -type f -exec stat -c "%n %a" {} \;

If command displays any output, this is a finding.

Check Content Reference

M

Target Key

5730