The operating system must maintain reviewer/releaser identity and credentials within the established chain of custody for all information reviewed or released.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000210-ESXI5-PF	SRG-OS-000210-ESXI5-PF	SRG-OS-000210-ESXI5-PF_rule		Medium

Description
When it comes to data review and data release, there must be a correlation between the reviewed data and the person who performs the review. If the reviewer is a human or if the review function is automated but separate from the release/transfer function, the operating system associates the identity of the reviewer of the information to be released with the information and the information label. Permanent finding - ESXi v5 does not support this requirement.

Description

When it comes to data review and data release, there must be a correlation between the reviewed data and the person who performs the review. If the reviewer is a human or if the review function is automated but separate from the release/transfer function, the operating system associates the identity of the reviewer of the information to be released with the information and the information label. Permanent finding - ESXi v5 does not support this requirement.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000210-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-SRG-OS-000210-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.