The operating system must notify the user of organization-defined security-related changes to the user's account that occur during the organization-defined time period.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-OS-000235-ESXI5-PF	SRG-OS-000235-ESXI5-PF	SRG-OS-000235-ESXI5-PF_rule		Medium

Description
Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users. Applicable, but permanent finding - The hypervisor does not support this functionality.

Description

Some organizations may define certain security events as events requiring user notification. An organization may define an event such as a password change to a user's account occurring outside of normal business hours as a security related event that requires the user be notified. In those instances where organizations define such events, the operating system must notify the affected user or users. Applicable, but permanent finding - The hypervisor does not support this functionality.

STIG	Date
VMware ESXi v5 Security Technical Implementation Guide	2013-01-15

Details

Check Text ( C-SRG-OS-000235-ESXI5-PF_chk )
ESXi does not support this requirement. This is a permanent finding.

Fix Text (F-SRG-OS-000235-ESXI5-PF_fix)
This requirement is a permanent finding and cannot be fixed. An appropriate mitigation for the system must be implemented but this finding cannot be considered fixed.