6.0.1

Table Of Contents
n
GUESTLIB_HOST_MEM_UNMAPPED_MB
Features not exposed in
vSphere that could
cause vulnerabilities
Because VMware virtual machines run in many VMware products in
addition to vSphere, some virtual machine parameters do not apply in a
vSphere environment. Although these features do not appear in vSphere
user interfaces, disabling them reduces the number of vectors through which
a guest operating system could access a host. Use the following .vmx setting
to disable these features:
isolation.tools.unity.push.update.disable = "TRUE"
isolation.tools.ghi.launchmenu.change = "TRUE"
isolation.tools.ghi.autologon.disable = "TRUE"
isolation.tools.hgfsServerSet.disable = "TRUE"
isolation.tools.memSchedFakeSampleStats.disable = "TRUE"
isolation.tools.getCreds.disable = "TRUE"
Using vmwtool to Configure VMware Tools in a NetWare Virtual
Machine
In a NetWare virtual machine, using the system console, you can configure virtual machine options such as
time synchronization, CPU idling, and device configuration with VMware Tools. The VMware Tools
command-line program is called vmwtool.
Although you cannot use the VMware Tools configuration utility in a NetWare virtual machine, you can use
the vmwtool command to achieve some of the same functionality. This command has the following syntax:
vmwtool command
Table 111. vmwtool Commands
vmwtool Command Description
help
Displays a summary of VMware Tools commands and options in a
NetWare guest operating system.
partitonlist
Displays a list of all disk partitions in the virtual disk and whether or not a
partition can be shrunk.
shrink [partition]
Shrinks the listed partitions. If no partitions are specified, all partitions in
the virtual disk are shrunk.
The status of the shrink process appears at the bottom of the system
console.
devicelist
Lists each removable device in the virtual machine, its device ID, and
whether the device is enabled or disabled. Removable devices include the
virtual network adapter, CD-ROM, and floppy drives. By default, floppy
drive is not connected when the virtual machine powers on.
disabledevice [device_name]
Disables the specified device or devices in the virtual machine. If no device
is specified, all removable devices in the virtual machine are disabled.
enabledevice [device_name]
Enables the specified device or devices in the virtual machine. If no device
is specified, all removable devices in the virtual machine are enabled.
vSphere Virtual Machine Administration
212 VMware, Inc.