STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x SLES Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

The SLES for the vRealize boot loader configuration file(s) must be group-owned by root, bin, sys, or system.

DISA Rule

SV-99137r1_rule

Vulnerability Number

V-88487

Group Title

SRG-OS-000080-GPOS-00048

Rule Version

VROM-SL-000435

Severity

CAT II

CCI(s)

• CCI-000213 - The information system enforces approved authorizations for logical access to information and system resources in accordance with applicable access control policies.

Weight

10

Fix Recommendation

Change the group-ownership of the "/boot/grub/menu.lst" file:

# chgrp root /boot/grub/menu.lst

Check Contents

Check "/boot/grub/menu.lst" file ownership:

# stat /boot/grub/menu.lst

If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.

Vulnerability Number

V-88487

Documentable

False

Rule Version

VROM-SL-000435

Severity Override Guidance

Check "/boot/grub/menu.lst" file ownership:

# stat /boot/grub/menu.lst

If the group-owner of the file is not "root", "bin", "sys", or "system", this is a finding.

Check Content Reference

M

Target Key

3461

Comments