The HPE 3PAR OS must be configured to disable nonessential Common Information Model services.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-255290 | SRG-OS-000095-GPOS-00049 | HP3P-33-111001 | SV-255290r958478_rule | 2024-08-27 | 2 |
| Description |
|---|
| It is detrimental for operating systems to provide, or install by default, functionality exceeding requirements or mission objectives. These unnecessary capabilities or services are often overlooked and therefore may remain unsecured. They increase the risk to the platform by providing additional attack vectors. The HPE 3PAR OS does not, by default, operate nonessential services. The Common Information Model services component must be configured for it to start. If it is not required by the mission, then it must be disabled. |
| ℹ️ Check |
|---|
| Check with the Information Owner to verify if the mission objectives require CIM functionality. If the mission requirements include CIM service capabilities, this requirement is not applicable. If mission requirements do not include CIM, then verify the state of the CIM services capabilities on the array: cli% showcim If the service state is not "Disabled", this is a finding. |
| ✔️ Fix |
|---|
| Verify with the Information Owner whether mission objectives require CIM functionality. If CIM services functionality is not part of the mission requirements, stop and disable "cimserver": cli% stopcim -f cli% setcim -f -http disable -https disable |