UCF STIG Viewer Logo

The SLES for vRealize must have IEEE 1394 (Firewire) disabled unless needed.


Finding ID Version Rule ID IA Controls Severity
V-89689 VRAU-SL-000675 SV-100339r1_rule Medium
Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2018-10-12


Check Text ( C-89381r1_chk )
If the SLES for vRealize needs IEEE 1394 (Firewire), this is not applicable.

Check if the firewire module is not disabled:

# grep "install ieee1394 /bin/true" /etc/modprobe.conf /etc/modprobe.conf.local /etc/modprobe.d/*

If no results are returned, this is a finding.
Fix Text (F-96431r1_fix)
Prevent the SLES for vRealize from loading the firewire module:

# echo "install ieee1394 /bin/true" >> /etc/modprobe.conf.local