STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must generate log records for system startup and shutdown.

DISA Rule

SV-99467r1_rule

Vulnerability Number

V-88817

Group Title

SRG-APP-000089-WSR-000047

Rule Version

VROM-TC-000115

Severity

CAT II

CCI(s)

• CCI-000169 - The information system provides audit record generation capability for the auditable events defined in AU-2 a. at organization-defined information system components.

Weight

10

Fix Recommendation

Navigate to and open /opt/pivotal/pivotal-tc-server-standard/tomcat-7.0.57.B.RELEASE/bin/catalina.sh.

Navigate to and locate the start block : "elif [ "$1" = "start" ] ; then".

Navigate to and locate both “eval” statements:

"org.apache.catalina.startup.Bootstrap "$@" start \"

Add this statement immediately below both of the “eval” statements:

'>> "$CATALINA_OUT" 2>&1 "&"'

Check Contents

At the command prompt, execute the following command:

more /storage/log/vcops/log/product-ui/catalina.out

Verify that tc Server start and stop events are being logged.

If the tc Server start and stop events are not being recorded, this is a finding.

Note: The tc Server service is referred to as Catalina in the log.

Vulnerability Number

V-88817

Documentable

False

Rule Version

VROM-TC-000115

Severity Override Guidance

At the command prompt, execute the following command:

more /storage/log/vcops/log/product-ui/catalina.out

Verify that tc Server start and stop events are being logged.

If the tc Server start and stop events are not being recorded, this is a finding.

Note: The tc Server service is referred to as Catalina in the log.

Check Content Reference

M

Target Key

3441

Comments