Skip to content

VAMI must protect against or limit the effects of HTTP types of denial-of-service (DoS) attacks.

An XCCDF Rule

Description

In UNIX and related computer operating systems, a file descriptor is an indicator used to access a file or other input/output resource, such as a pipe or network connection. File descriptors index into a per-process file descriptor table maintained by the kernel, which in turn indexes into a systemwide table of files opened by all processes, called the file table. As a single-threaded server, Lighttpd must be limited in the number of file descriptors that can be allocated. This will prevent Lighttpd from being used in a form of DoS attack against the operating system.

ID
SV-256662r888508_rule
Version
VCLD-70-000018
Severity
Medium
References
Updated

Remediation Templates

A Manual Procedure

Navigate to and open:

/opt/vmware/etc/lighttpd/lighttpd.conf

Add or reconfigure the following value: