In standard production operations, use of diagnostics can reveal undiscovered vulnerabilities that lead to compromised data. To prevent misuse of data, disable the HTTP Trace method.

Procedure

  1. To verify the Trace method for the Apache2 server, run the following command grep TraceEnable /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.
  2. To disable the Trace method for the Apache2 server, run the following command sed -i "/^[^#]*TraceEnable/ c\TraceEnable off" /usr/lib/vmware-vcopssuite/utilities/conf/vcops-apache.conf.