V-239848

Discussion

Preventing non-privileged users from executing privileged functions mitigates the risk that unauthorized individuals or processes may gain unnecessary access to information or privileges. The vRealize Automation product stores important system information in the security.properties file. Preventing access to this file from non-privileged is essential to ensure the integrity and confidentiality of vRA.

Check Content

At the command prompt, execute the following command:

ls -l /etc/vcac/security.properties

If the file owner and group-owner are not "vcac", this is a finding.