Item Search

NameAudit NamePluginCategory
PHTN-30-000008 - The Photon operating system must have the sshd LogLevel set to 'INFO' - INFO.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

ACCESS CONTROL

PHTN-30-000015 - The Photon operating system audit log must attempt to log audit failures to syslog.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

AUDIT AND ACCOUNTABILITY

PHTN-30-000023 - The Photon operating system must enforce password complexity by requiring that at least one numeric character be used.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-30-000024 - The Photon operating system must require that new passwords are at least four characters different from the old password.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-30-000031 - The Photon operating system must require authentication upon booting into single-user and maintenance modes.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

ACCESS CONTROL

PHTN-30-000035 - The Photon operating system must disable new accounts immediately upon password expiration.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

IDENTIFICATION AND AUTHENTICATION

PHTN-30-000040 - The Photon operating system '/var/log' directory must be owned by root.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

PHTN-30-000066 - The Photon operating system must remove all software components after updated versions have been installed.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

SYSTEM AND INFORMATION INTEGRITY

PHTN-30-000068 - The Photon operating system must generate audit records when successful/unsuccessful logon attempts occur.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

AUDIT AND ACCOUNTABILITY

PHTN-30-000070 - The Photon operating system auditd service must generate audit records for all account creations, modifications, disabling, and termination events.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

AUDIT AND ACCOUNTABILITY

PHTN-30-000075 - The Photon operating system must create a home directory for all new local interactive user accounts.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000078 - The Photon operating system must configure sshd to disallow Generic Security Service Application Program Interface (GSSAPI) authentication.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000082 - The Photon operating system must configure sshd to disallow Kerberos authentication.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000084 - The Photon operating system must configure sshd to disallow compression of the encrypted session stream.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000088 - The Photon operating system must configure sshd to limit the number of allowed login attempts per connection.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000090 - The Photon operating system must be configured so the '/etc/skel' default scripts are protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000092 - The Photon operating system must be configured so that all global initialization scripts are protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000095 - The Photon operating system must be configured so the '/etc/cron.allow' file is protected from unauthorized modification.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000100 - The Photon operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-30-000106 - The Photon operating system must not perform IPv4 packet forwarding.DISA STIG VMware vSphere 7.0 Photon OS v1r4Unix

CONFIGURATION MANAGEMENT

PHTN-67-000042 - The Photon operating system messages file must be owned by root.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

SYSTEM AND INFORMATION INTEGRITY

PHTN-67-000045 - The Photon operating system must audit all account modifications - passwdDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL

PHTN-67-000045 - The Photon operating system must audit all account modifications - shadowDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL

PHTN-67-000049 - The Photon operating system audit files and directories must have correct permissions.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000051 - The Photon operating system must protect audit tools from unauthorized modification - auditdDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000053 - The Photon operating system package files must not be modified.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000055 - The Photon operating system must configure sshd with a specific ListenAddress.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL

PHTN-67-000057 - The Photon operating system must configure auditd to keep five rotated log files.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000060 - The Photon operating system must configure auditd to log space limit problems to syslog.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000072 - The Photon operating system must generate audit records when successful/unsuccessful logon attempts occur - lastlogDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000074 - The Photon operating system auditd service must generate audit records for all account creations, modifications, disabling, and termination events.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

AUDIT AND ACCOUNTABILITY

PHTN-67-000078 - The Photon operating system must ensure audit events are flushed to disk at proper intervals - flushDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000084 - The Photon operating system must configure sshd to disable environment processing.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000090 - The Photon operating system must configure sshd to disallow compression of the encrypted session stream.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000096 - The Photon operating system must be configured so that the /etc/skel default scripts are protected from unauthorized modification - bash_profileDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000098 - The Photon operating system must be configured so that all global initialization scripts are protected from unauthorized modification.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000099 - The Photon operating system must be configured so that all system startup scripts are protected from unauthorized modification.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000102 - The Photon operating system must be configured so that all cron jobs are protected from unauthorized modification.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000103 - The Photon operating system must be configured so that all cron paths are protected from unauthorized modification - cron.dailyDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000103 - The Photon operating system must be configured so that all cron paths are protected from unauthorized modification - cron.hourlyDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000103 - The Photon operating system must be configured so that all cron paths are protected from unauthorized modification - cron.weeklyDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000106 - The Photon operating system must prevent IPv4 Internet Control Message Protocol (ICMP) redirect messages from being accepted - net.ipv4.conf.eth0.accept_redirectsDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000107 - The Photon operating system must prevent IPv4 Internet Control Message Protocol (ICMP) secure redirect messages from being accepted - net.ipv4.conf.all.secure_redirectsDISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000112 - The Photon operating system must not perform IPv4 packet forwarding.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000114 - The Photon OS must not have the xinetd service enabled.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000117 - The Photon operating system must enforce password complexity on the root account.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000120 - The Photon operating system must protect all sysctl configuration files from unauthorized access.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000122 - The Photon operating system must set the UMASK parameter correctly.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000123 - The Photon operating system must configure sshd to disallow HostbasedAuthentication.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

CONFIGURATION MANAGEMENT

PHTN-67-000124 - The Photon operating system must enforce approved authorizations for logical access to information and system resources in accordance with applicable access control policies.DISA STIG VMware vSphere 6.7 Photon OS v1r6Unix

ACCESS CONTROL