STIGQter STIGQter: STIG Summary: VMware vRealize Operations Manager 6.x tc Server Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

tc Server ALL must initiate logging during service start-up.

DISA Rule

SV-99475r1_rule

Vulnerability Number

V-88825

Group Title

SRG-APP-000092-WSR-000055

Rule Version

VROM-TC-000135

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Navigate to and open /opt/pivotal/pivotal-tc-server-standard/tomcat-7.0.57.B.RELEASE/bin/catalina.sh.

Navigate to and locate the start block : "elif [ "$1" = "start" ] ; then".

Navigate to and locate both “eval” statements:

"org.apache.catalina.startup.Bootstrap "$@" start \"

Add this statement immediately below both of the “eval” statements:

'>> "$CATALINA_OUT" 2>&1 "&"'

Check Contents

At the command prompt, execute the following command:

more /opt/pivotal/pivotal-tc-server-standard/tomcat-7.0.57.B.RELEASE/bin/catalina.sh

Type /touch "$CATALINA_OUT"

Verify that the start command contains the command ">> "$CATALINA_OUT" 2>&1 "&""

If the command is not correct or is missing, this is a finding.

Note: Use the Enter key to scroll down after typing /touch "$CATALINA_OUT"

Vulnerability Number

V-88825

Documentable

False

Rule Version

VROM-TC-000135

Severity Override Guidance

At the command prompt, execute the following command:

more /opt/pivotal/pivotal-tc-server-standard/tomcat-7.0.57.B.RELEASE/bin/catalina.sh

Type /touch "$CATALINA_OUT"

Verify that the start command contains the command ">> "$CATALINA_OUT" 2>&1 "&""

If the command is not correct or is missing, this is a finding.

Note: Use the Enter key to scroll down after typing /touch "$CATALINA_OUT"

Check Content Reference

M

Target Key

3441

Comments