The operating system must employ automated mechanisms to prevent program execution in accordance with the organization-defined specifications.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000097-ESXI5-PNF	SRG-OS-000097-ESXI5-PNF	SRG-OS-000097-ESXI5-PNF_rule		Medium

Description
Operating systems are capable of providing a wide variety of functions and services. Execution must be disabled based on organization-defined specifications. Permanent not a finding - There is no facility to interpret code at runtime and the compiled modules are subject to both the controls for execution and a default-deny policy (for unsigned code), integral to the kernel.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000097-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.

Fix Text (F-SRG-OS-000097-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.