Performance Charts must fail to a known safe state if system initialization fails, shutdown fails, or aborts fail.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-239418	VCPF-67-000017	SV-239418r674977_rule		Medium

Description
Determining a safe state for failure and weighing that against a potential denial of service for users depends on what type of application the web server is hosting. For Performance Charts, it is preferable that the service abort startup on any initialization failure rather than continuing in a degraded, and potentially insecure, state.

STIG	Date
VMware vSphere 6.7 Perfcharts Tomcat Security Technical Implementation Guide	2022-01-03

Details

Check Text ( C-42651r674975_chk )
At the command line, execute the following command: # grep EXIT_ON_INIT_FAILURE /usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties Expected result: org.apache.catalina.startup.EXIT_ON_INIT_FAILURE = true If the output of the command does not match the expected result, this is a finding.

Fix Text (F-42610r674976_fix)
Navigate to and open /usr/lib/vmware-perfcharts/tc-instance/conf/catalina.properties. Add or change the following line: org.apache.catalina.startup.EXIT_ON_INIT_FAILURE=true