I am trying to secure an ESX host using Compliance Checker as the Security Baseline tool. I am not able to achieve compliancy for a few compliance rules mentioned below. I am referring to Compliance checker remediation guide for making that rule compliant. Could anyone provide some solution.
7 Minimize boot services: S91httpd.vmware |
7 Minimize boot services: S98mgmt-vmware - vmware-hostd 8085 port |
7 Minimize boot services: S98mgmt-vmware - vmware-hostd 8087 port |
7 Minimize boot services: S98mgmt-vmware - vmware-hostd 9080 port |
7 Minimize boot services: S99pegasus - cimserver 32770 port |
If you see the first compliance rule it says httpd.vmware service is a part of minimum recommended service running on ESX host. The list of services running on my ESX host are as follows.
/etc/rc3.d/S00microcode_ctl
/etc/rc3.d/S00vmkstart
/etc/rc3.d/S01vmware
/etc/rc3.d/S02megaraid_sas_ioctl
/etc/rc3.d/S02mptctlnode
/etc/rc3.d/S08iptables
/etc/rc3.d/S09firewall
/etc/rc3.d/S10network
/etc/rc3.d/S12syslog
/etc/rc3.d/S13irqbalance
/etc/rc3.d/S14ipmi
/etc/rc3.d/S20random
/etc/rc3.d/S32vmware-aam
/etc/rc3.d/S55sshd
/etc/rc3.d/S55vmware-late
/etc/rc3.d/S56rawdevices
/etc/rc3.d/S56xinetd
/etc/rc3.d/S58ntpd
/etc/rc3.d/S85gpm
/etc/rc3.d/S85vmware-webAccess
/etc/rc3.d/S90crond
/etc/rc3.d/S97vmware-vmkauthd
/etc/rc3.d/S98mgmt-vmware
/etc/rc3.d/S99local
/etc/rc3.d/S99pegasus
/etc/rc3.d/S99vmware-autostart
/etc/rc3.d/S99vmware-vpxa
/etc/rc3.d/S99wsman
Also i have checked the default location of the service httpd.vmware but i am not able to find it there ( Default Location - /etc/rc3.d/ ).
The second rule says that vmhostd port 8085 should be open on localhost for mgmt-vmware service. How could i do that. Its same for the rest of the 3 compliance rules.
