In standard production operations, use of diagnostics can reveal undiscovered vulnerabilities that lead to compromised data. To prevent misuse of data, disable the HTTP Trace method.
Procedure
- To verify the Trace method for the Apache2 server, run the following command grep TraceEnable /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.
- To disable the Trace method for the Apache2 server, run the following command sed -i "/^[^#]*TraceEnable/ c\TraceEnable off" /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.