In standard production operations, use of diagnostics can reveal undiscovered vulnerabilities that lead to compromised data. To prevent misuse of data, deactivate the HTTP Trace method.

Procedure

  1. To verify the Trace method for the Apache2 server, run the following command grep TraceEnable /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.
  2. To deactivate the Trace method for the Apache2 server, run the following command sed -i "/^[^#]*TraceEnable/ c\TraceEnable off" /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.