VCRP-67-000006 - The rhttpproxy must have logging enabled.

Details

After a security incident has occurred, investigators will often review log files to determine what happened. The rhttpproxy must create logs upon service startup to capture information relevant to investigations.


Solution

Navigate to and open /etc/vmware-rhttpproxy/config.xml.

Locate the / block and configure as follows:

true

Restart the service for changes to take effect.

# vmon-cli --restart rhttpproxy


Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system Unix.


References


Source