Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
ISO images are not verified for integrity when moved across the network.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-15886 | ESX0900 | SV-16827r1_rule | DCNR-1 ECTM-1 ECTM-2 | Medium |
| Description |
|---|
| Since ISO operating system images are typically large files, transferring these ISO operating system images over the network may cause corruption to the files. There are simple ways to check the integrity of the file on both the source and destination system using hashing algorithms. Users should create hash checksums on all ISO operating system images on the ESX Server before utilizing the ISO operating system image for virtual machines. |
| STIG | Date |
|---|---|
| VMware ESX 3 Server | 2016-05-13 |
Details
| Check Text ( C-16245r1_chk ) |
|---|
| On the ESX Server service console go to the partition that stores the ISO images and verify hash checksums are present for any ISO files. Perform the following to determine if ISO images are verified for integrity: # cd /vmimages (Or location of ISO images) && ls -al # cat iso_sha1sum_file (Where this is the sha1sum file of ISO file) # sha1sum Filename.iso – ISO file OR #Sha1sum –c iso_sha1sum_file Filename.iso : OK Examples: # cat Redhat.iso.sha1 da39a3ee5e6b4b0d3255bfef95601890afd80709 Redhat.iso # sha1sum Redhat.iso da39a3ee5e6b4b0d3255bfef95601890afd80709 Redhat.iso OR # sha1sum –c Redhat.iso.sha1 Redhat.iso : OK Compare the sha1sum against each other to ensure they are the same. If they are not the same, this is a finding. |
| Fix Text (F-15846r1_fix) |
|---|
| Verify all SHA1 checksums for all ISO images. |