TMA-VMWARE-3.3

Host must deactivate the ESXi Managed Object Browser (MOB)

CaoCấp 1Tự độngvmware

Mô tả

The Managed Object Browser (MOB) is a web-based server application that lets you examine and change system objects and configurations. It is a prudent security measure to deactivate the MOB unless it's essential for operations. The parameter governing this behavior is Config.HostAgent.plugins.solo.enableMob with a recommended setting of False. The audit reads Config.HostAgent.plugins.solo.enableMob with esxcli and requires false (0). Runs in the ESXi Shell (busybox sh) as root.

Cách kiểm tra

Phương pháp kiểm tra: Lệnh shell

shell

out=$(esxcli system settings advanced list -o /Config/HostAgent/plugins/solo/enableMob 2>/dev/null) || exit 1
v=$(printf '%s\n' "$out" | awk '$1=="Int" && $2=="Value:" {print $3; exit}')
case "$v" in ''|*[!0-9-]*) echo '/Config/HostAgent/plugins/solo/enableMob: no integer value'; exit 1 ;; esac
if [ "$v" -eq 0 ]; then echo compliant; else echo "/Config/HostAgent/plugins/solo/enableMob = $v (expected false/0)"; fi

Đầu ra mong đợi: compliant

Cách khắc phục

Phương pháp khắc phục: Hướng dẫn hoặc bản vá hạ tầng

To disabled MOB, perform the following from the vSphere Web Client: 1. Select a host 2. Click Configure then expand System then select Advanced System Settings. 3. Click Edit then search for Config.HostAgent.plugins.solo.enableMob 4. Set the value to false. 5. Click OK. Note: You cannot disable the MOB while a host is in lockdown mode. Note 2: You must disable MOB from the vSphere interface not via the vim-cmd command.

Thuộc tính

Hệ điều hành: Bất kỳ
Thẻ: vmwareesximanagement
Tham chiếu: CIS VMware ESXi 8.0 Benchmark v1.4.0 - 3.3 Host must deactivate the ESXi Managed Object Browser (MOB)

Kiểm tra máy này

Chạy lệnh này trên máy bạn được phép kiểm tra. Lần quét chỉ ở chế độ đọc.

shell

tmaegis scan --target vmware