UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The SLES for vRealize must have IEEE 1394 (Firewire) disabled unless needed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-89689 VRAU-SL-000675 SV-100339r1_rule Medium
Description
Firewire is a common computer peripheral interface. Firewire devices may include storage devices that could be used to install malicious software on a system or exfiltrate data.
STIG Date
VMware vRealize Automation 7.x SLES Security Technical Implementation Guide 2018-10-12

Details

Check Text ( C-89381r1_chk )
If the SLES for vRealize needs IEEE 1394 (Firewire), this is not applicable.

Check if the firewire module is not disabled:

# grep "install ieee1394 /bin/true" /etc/modprobe.conf /etc/modprobe.conf.local /etc/modprobe.d/*

If no results are returned, this is a finding.
Fix Text (F-96431r1_fix)
Prevent the SLES for vRealize from loading the firewire module:

# echo "install ieee1394 /bin/true" >> /etc/modprobe.conf.local