The VMM must verify correct operation of all security functions.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-207506	SRG-OS-000445	SRG-OS-000445-VMM-001780	SV-207506r958944_rule	2024-12-06	2

Description
Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the VMM responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.

Description

Without verification of the security functions, security functions may not operate correctly and the failure may go unnoticed. Security function is defined as the hardware, software, and/or firmware of the VMM responsible for enforcing the system security policy and supporting the isolation of code and data on which the protection is based. Security functionality includes, but is not limited to, establishing system accounts, configuring access authorizations (i.e., permissions, privileges), setting events to be audited, and setting intrusion detection parameters.

ℹ️ Check
Verify the VMM verifies correct operation of all security functions. If it does not, this is a finding.

✔️ Fix
Configure the VMM to verify correct operation of all security functions.