vSphere UI plugins must be authorized before use.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-256786	SRG-APP-000131-WSR-000073	VCUI-70-000009	SV-256786r889357_rule	2023-06-15	1

Description
The vSphere UI ships with a number of plugins out of the box. Any additional plugins may affect the availability and integrity of the system and must be approved and documented by the information system security officer (ISSO) before deployment.

ℹ️ Check
At the command prompt, run the following command: # diff <(find /usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins -type f\|sort) <(rpm -ql vsphere-ui\|grep "/usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins/"\|sort) If there is any output, this indicates a vSphere UI plugin is present that does not ship with the vCenter Server Appliance (VCSA). If this plugin is not known and approved, this is a finding.

ℹ️ Check

At the command prompt, run the following command: # diff <(find /usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins -type f|sort) <(rpm -ql vsphere-ui|grep "/usr/lib/vmware-vsphere-ui/plugin-packages/vsphere-client/plugins/"|sort) If there is any output, this indicates a vSphere UI plugin is present that does not ship with the vCenter Server Appliance (VCSA). If this plugin is not known and approved, this is a finding.

✔️ Fix
For every unauthorized plugin returned by the check, run the following command: # rm <file>