GEN000380-ESXI5-000043 – The GID assigned to a user must exist.
Details If a user is assigned the GID of a group not existing on the system, and a group with...
- Home
- Security Hardening
- DISA STIG VMware ESXi Server 5 STIG V2R1
DISA STIG VMware ESXi Server 5 STIG V2R1
GEN000585-ESXI5-000080 – The system must enforce the entire password during authentication.
Details Some common password hashing schemes only process the first eight characters of a user’s password, which reduces the effective...GEN005460-ESXI5-000060 – The system must only use remote syslog servers (log hosts) justified and documented using site-defined procedures.
Details If a remote log host is in use and it has not been justified and documented with the IAO,...GEN000790-ESXI5-000085 – The system must prevent the use of dictionary words for passwords – V-39418
Details An easily guessable password provides an open door to any external or internal malicious intruder. Many computer compromises occur...GEN005501-ESXI5-9778 – The SSH client must be configured to only use the SSHv2 protocol.
Details SSHv1 is not a DoD-approved protocol and has many well-known vulnerability exploits. Exploits of the SSH client could provide...GEN000940-ESXI5-000042 – The root accounts executable search path must be the vendor default and must contain only absolute paths.
Details The executable search path (typically the PATH environment variable) contains a list of directories for the shell to search...GEN000945-ESXI5-000333 – The root accounts library search path must be the system default and must contain only absolute paths.
Details The library search path environment variable(s) contain a list of directories for the dynamic linker to search to find...GEN000950-ESXI5-444 – The root accounts list of preloaded libraries must be empty.
Details The library preload list environment variable contains a list of libraries for the dynamic linker to load before loading...GEN001375-ESXI5-000086 – For systems using DNS resolution, at least two name servers must be configured.
Details To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could...GEN002120-ESXI5-000045 – The /etc/shells (or equivalent) file must exist – or equivalent file must exist
Details The shells file (or equivalent) lists approved default shells. It helps provide layered defense to the security approach by...