STIGQter: STIG Summary: VMW vRealize Automation 7.x HA Proxy Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 28 Sep 2018:

HAProxys private key must have access restricted.

DISA Rule

SV-99815r1_rule

Vulnerability Number

V-89165

Group Title

SRG-APP-000176-WSR-000096

Rule Version

VRAU-HA-000200

Severity

CAT II

CCI(s)

CCI-000186 - The information system, for PKI-based authentication, enforces authorized access to the corresponding private key.

Weight

Fix Recommendation

At the command prompt, execute the following command:s:

chmod 600 /etc/apache2/server.pem

Check Contents

At the command prompt, execute the following command:

ls -al /etc/apache2/server.pem

If the permissions on the file are not "600", this is a finding.

Vulnerability Number

V-89165

Documentable

False

Rule Version

VRAU-HA-000200

Severity Override Guidance

At the command prompt, execute the following command:

ls -al /etc/apache2/server.pem

If the permissions on the file are not "600", this is a finding.

Check Content Reference

Target Key

3455

HAProxys private key must have access restricted.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments