Tell me more ×
IT Security Stack Exchange is a question and answer site for IT security professionals. It's 100% free, no registration required.
up vote 1 down vote favorite

I have realized there are issues such as virtual machines being exposed to other VMs within the same system when they're connected to the VMCI socket interface. How do we prevent this ?

share|improve this question
Are you referring to any specific known exploits (such as arbitrary code execution exploit on Windows hosts) and asking how to mitigate these, or asking about VMCI vulnerability in general? Non specific questions are not encouraged, as per faq. Please explain in more detail what specific details of VMCI connected hosts are you interested in hardening, otherwise your question will be considered as too broad and inspiring discussion. – TildalWave Mar 12 at 4:04
First of all, TidalWave I would like to know why My question regarding controls in a VMware enviorment was closed as its too broad or narrow. I am being very specific here. I wasn't asking what are the Information technology General controls. I was asking possible ITGC/ Technical controls in a VMware environment. To give some examples, – Milito Bhath Mar 12 at 15:28
Esxi default username and passwords needs to be changed.The risk here is that it cannot be kept as 'root' as default accounts are widely known, documented, and they could easily be targeted. Esxi shell should be protected. SSH access to busybox shell should be protected. VMware ESX is configured with at least two networks: one for VMs and one for system management. – Milito Bhath Mar 12 at 15:29
I didn't close it, but the answer why it was closed is there, in the description of the reason for being closed. Please note that if someone is trying to point you in the right direction and give suggestions how you could improve your question, they are most likely trying to answer it but lack details you should provide. This website is community moderated, and as such you're part of this community and just as responsible for its quality. Being on-topic and descriptive are one of these qualitative factors, more is in the FAQ. Thanks! – TildalWave Mar 12 at 17:38
1  
Re "Esxi default username and passwords needs to be changed", if you're researching to find an answer to your question on your own, then it is completely acceptable (encouraged even) to post a new answer with your findings. ;) – TildalWave Mar 12 at 17:50

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.