TMA-ESXI9-3.4

Host must deactivate SLP

보통레벨 1자동vmware

설명

The Service Location Protocol (SLP) is used for the discovery and selection of network services in local area networks, which simplifies configuration by allowing computers to find necessary services automatically. The practice of deactivating SLP when not in use aligns with the principle of minimizing the attack surface by shutting down non-essential services. The audit runs /etc/init.d/slpd status and requires "not running". Runs in the ESXi Shell (busybox sh) as root.

점검 방법

감사 방식: 셸 명령

shell

st=$(/etc/init.d/slpd status 2>&1)
case "$st" in *'not running'*) echo compliant ;; *running*) echo 'slpd is running' ;; *) echo "slpd status: $st"; exit 1 ;; esac

예상 출력: compliant

조치 방법

조치 방식: 가이드 또는 인프라 패치

1. Stop SLP if running: /etc/init.d/slpd stop Note: Confirm no operational dependency requires SLP before disabling it.

속성

운영 체제: 모두
태그: vmwareesximanagement
참고 자료: CIS VMware ESXi 9.0 Benchmark v1.0.0 - 3.4 Host must deactivate SLP

이 호스트 점검하기

감사 권한이 있는 시스템에서 실행하세요. 스캔은 읽기 전용입니다.

shell

tmaegis scan --target vmware