The vRealize Automation security file must be restricted to the vcac user.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-89131	VRAU-AP-000400	SV-99781r1_rule		Medium

Description
Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. The vRealize Automation product stores important system information in the security.properties file. Preventing access to this file from non-privileged is essential to ensure the integrity and confidentiality of vRA.

Description

Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. The vRealize Automation product stores important system information in the security.properties file. Preventing access to this file from non-privileged is essential to ensure the integrity and confidentiality of vRA.

STIG	Date
VMware Automation 7.x Application Security Technical Implementation Guide	2018-10-12

Details

Check Text ( C-88823r1_chk )
At the command prompt, execute the following command: ls -l /etc/vcac/security.properties If the file owner and group-owner are not "vcac", this is a finding.

Fix Text (F-95873r2_fix)
At the command prompt, execute the following commands: chown vcac:vcac /etc/vcac/security.properties