STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxy must be run in a chroot jail.

DISA Rule

SV-99807r1_rule

Vulnerability Number

V-89157

Group Title

SRG-APP-000141-WSR-000086

Rule Version

VRAU-HA-000175

Severity

CAT II

CCI(s)

CCI-000381 - The organization configures the information system to provide only essential capabilities.

Weight

Fix Recommendation

Navigate to and open /etc/haproxy/haproxy.cfg

Navigate to and configure the globals section with the following value:

'chroot /var/lib/haproxy'

Check Contents

At the command prompt, execute the following command:

grep 'chroot' /etc/haproxy/haproxy.cfg

If the value "/var/lib/haproxy" is not listed, this is a finding.

Vulnerability Number

V-89157

Documentable

False

Rule Version

VRAU-HA-000175

Severity Override Guidance

At the command prompt, execute the following command:

grep 'chroot' /etc/haproxy/haproxy.cfg

If the value "/var/lib/haproxy" is not listed, this is a finding.

Check Content Reference

Target Key

3455

HAProxy must be run in a chroot jail.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments