NFS servers must only accept NFS requests from privileged ports on client systems.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| GEN005720-ESXI5-PNF | GEN005720-ESXI5-PNF | GEN005720-ESXI5-PNF_rule | Medium |
| Description |
|---|
| If clients are not required to use privileged ports to get NFS services, then exported file systems may be in danger of mounting by malicious users and intruders that do not have access to privileged ports. Applicable, but permanent not-a-finding - no nfsd. |
| STIG | Date |
|---|---|
| VMware ESXi v5 Security Technical Implementation Guide | 2013-01-15 |
Details
| Check Text ( C-GEN005720-ESXI5-PNF_chk ) |
|---|
| ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding. |
| Fix Text (F-GEN005720-ESXI5-PNF_fix) |
|---|
| This requirement is permanent not a finding. No fix is required. |