ESX Agent Manager must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-256690 | SRG-APP-000225-WSR-000140 | VCEM-70-000018 | SV-256690r888626_rule | 2023-06-15 | 1 |
Description
Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. For the ESX Agent Manager, it is preferable that the service abort startup on any initialization failure rather than continuing in a degraded, and potentially insecure, state.
ℹ️ Check
At the command line, run the following command:
# grep EXIT_ON_INIT_FAILURE /etc/vmware-eam/catalina.properties
Expected result:
org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true
If the output of the command does not match the expected result, this is a finding.
✔️ Fix
Navigate to and open:
/etc/vmware-eam/catalina.properties
Add or change the following line:
org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true
Restart the service with the following command:
# vmon-cli --restart eam