The Photon operating system must protect all boot configuration files from unauthorized modification.

Overview

Finding IDVersionRule IDIA ControlsSeverity
V-256580PHTN-30-000111SV-256580r991589_ruleCCI-000366medium
Description
Boot configuration files control how the system boots, including single-user mode, auditing, log levels, etc. Improper or malicious configurations can negatively affect system security and availability.
STIGDate
VMware vSphere 7.0 vCenter Appliance Photon OS Security Technical Implementation Guide2024-12-16

Details

Check Text (C-256580r991589_chk)

At the command line, run the following command: # find /boot/*.cfg -xdev -type f -a '(' -perm -002 -o -not -user root -o -not -group root ')' -exec ls -ld {} \; If any files are returned, this is a finding.

Fix Text (F-60198r887413_fix)

At the command line, run the following commands for each returned file: # chmod 644 <file> # chown root:root <file>