Detections
Analytics

7.28 Virtual machines must limit informational messages from the virtual machine to the VMX file

Information

Limit the number of informational messages from the virtual machine to the VMX file to prevent the file from exceeding its default size of 1MB, thereby avoiding potential denial of service situations due to a full datastore. The parameter governing this behavior is tools.setInfo.sizeLimit with a recommended setting of 1048576 or Undefined.

This control helps in maintaining a clutter-free VMX file, ensuring the datastore operates optimally without being overwhelmed by excessive informational messages, which in turn supports system reliability and performance.

Solution

To remediate this recommendation, set tools.setInfo.sizeLimit to the organization-approved limit using Set-AdvancedSetting/New-AdvancedSetting . Validate any guest-management tooling that relies on guest information exchange.

Impact:

No negative functional impact identified.

See Also

https://workbench.cisecurity.org/benchmarks/26357

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-4, CSCv7|6.4

Plugin: VMware

Control ID: 98741675af18fac65e59ada66349e058c9db49ca92b71c901c660094ee417b9f