1. Home
  2. Security Hardening
  3. CIS VMware ESXi 7.0 V1.1.0 L1
  4. Ensure informational messages from the VM to the VMX file are limited

Ensure informational messages from the VM to the VMX file are limited

Details

Limit informational messages from the virtual machine (VM) to the virtual machine extensions (VMX) file to avoid filling the datastore. The configuration file containing these name-value pairs is limited to a size of 1 MB by default. This should be sufficient for most cases, but you can change this value if necessary, such as if large amounts of custom information are being stored in the configuration file.

Rationale:

Filling the datastore with informational messages from the VM to the VMX file could cause a denial of service.

Solution

Set this configuration as follows:
Run the following PowerCLI command:

# Add the setting to all VMs
Get-VM | New-AdvancedSetting -Name ‘tools.setInfo.sizeLimit’ -value 1048576

Default Value:

1048576

Supportive Information

The following resource is also helpful.

This security hardening control applies to the following category of controls within NIST 800-53: Audit and Accountability.This control applies to the following type of system VMware.

References

Source

Updated on July 16, 2022
Was this article helpful?

Related Articles