Detections
Analytics

1.10 VCPF-80-000062

Information

The vCenter Perfcharts service must be configured to fail to a known safe state if system initialization fails.

GROUP ID: V-259080RULE ID: SV-259080r961122

Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. It is preferable that the service abort startup on any initialization failure rather than continuing in a degraded, and potentially insecure, state.

Solution

Navigate to and open:

/usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties

Add or change the following line:

org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true

Restart the service with the following command:

vmon-cli --restart perfcharts

See Also

https://workbench.cisecurity.org/benchmarks/23627

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-24, CAT|II, CCI|CCI-001190, Rule-ID|SV-259080r961122_rule, STIG-ID|VCPF-80-000062, Vuln-ID|V-259080

Plugin: Unix

Control ID: 8acd08d690629b0bc83b9d75ea6ae0b0f243f1f2579f60ae04d5fbe06604b109