UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The operating system must provide the capability to capture/record and log all content related to a user session.


Overview

Finding ID Version Rule ID IA Controls Severity
SRG-OS-000252-ESXI5-PNF SRG-OS-000252-ESXI5-PNF SRG-OS-000252-ESXI5-PNF_rule Medium
Description
Session auditing activities are developed, integrated, and used in consultation with legal counsel in accordance with applicable federal laws, Executive Orders, directives, policies, or regulations. Permanent not a finding - Auditing cannot be configured/implemented like a typical UNIX system. In the directory /var/log, auth.log records ESXi Shell authentication success and failure, shell.log records ESXi Shell usage logs, including enable/disable and every command entered, and syslog.log records management service initialization, watchdogs, scheduled tasks and DCUI use.
STIG Date
VMware ESXi v5 Security Technical Implementation Guide 2013-01-15

Details

Check Text ( C-SRG-OS-000252-ESXI5-PNF_chk )
ESXi supports this requirement and cannot be configured to be out of compliance. This is a permanent not a finding.
Fix Text (F-SRG-OS-000252-ESXI5-PNF_fix)
This requirement is permanent not a finding. No fix is required.