UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

VAMI must protect against or limit the effects of HTTP types of denial-of-service (DoS) attacks.


Overview

Finding ID Version Rule ID IA Controls Severity
V-239734 VCLD-67-000027 SV-239734r679312_rule Medium
Description
In UNIX and related computer operating systems, a file descriptor is an indicator used to access a file or other input/output resource, such as a pipe or network connection. File descriptors index into a per-process file descriptor table maintained by the kernel, which in turn indexes into a system-wide table of files opened by all processes, called the file table. As a single-threaded server, Lighttpd must be limited in the number of file descriptors that can be allocated. This will prevent Lighttpd from being used in a form of DoS attack against the operating system.
STIG Date
VMware vSphere 6.7 VAMI-lighttpd Security Technical Implementation Guide 2021-04-15

Details

Check Text ( C-42967r679310_chk )
At the command prompt, execute the following command:

# /opt/vmware/sbin/vami-lighttpd -p -f /opt/vmware/etc/lighttpd/lighttpd.conf|grep "server.max-fds"

Expected result:

server.max-fds = 2048

If the output does not match the expected result, this is a finding.
Fix Text (F-42926r679311_fix)
Navigate to and open /opt/vmware/etc/lighttpd/lighttpd.conf.

Add or reconfigure the following value:

server.max-fds = 2048