Comments for Phil's NewsPhlash

Comment on Getting mac mail, ical and address book to talk to Exchange 2003 by Internet Banking

Internet Banking — Thu, 04 Feb 2010 07:43:52 +0000

Just wasting some time on Digg and I found your entry. Not typically what I like to read about, but it was certainly worth my time. Thanks.

Comment on ESX STIG Script by Philip Morrison

Philip Morrison — Thu, 09 Jul 2009 15:14:06 +0000

There are other projects in the works right now since vSphere is out. Probably wont see anything new for a while but we are still working on improvements. For now this script does 90% of the manual changes needed to get past the security review (not counting the manual review items)…

Thanks for the feedback though. Glad others are finding it useful.

Comment on ESX STIG Script by Peyton

Peyton — Wed, 08 Jul 2009 14:02:58 +0000

Thank you for you ESX STIG script it gives us a great starting point. Still looking forward to v1.4…

Comment on Wordpress Permalinks and GoDaddy by lieben

lieben — Tue, 03 Mar 2009 15:14:12 +0000

Interessante Informationen.

Comment on ESX STIG Script by Philip Morrison

Philip Morrison — Wed, 28 Jan 2009 02:43:19 +0000

There is a newer version of the script which has command line switches for adding the password and such so it is completely automated. We have not released this to the public yet because it has not been regression tested with the new findings that were added between the last published version and this unreleased version.

Comment on ESX STIG Script by mrTomahawk

mrTomahawk — Wed, 28 Jan 2009 02:10:46 +0000

Phil you mentioned in the VMTN forum that you “have built custom install CDs in which this script is run automatically in the %post section.” I am trying to do something similar by incorporating it in my kickstart file. I’m not that familiar with bash but it looked as though I could run the script silently providing a password hash. He is what I have:

lwp-download http://192.168.1.102/ESX_SRRSecure.ver1.3.sh /tmp/ESX_SRRSecure.ver1.3.sh
./tmp/ESX_SRRSecure.ver1.3.sh -s -h $1$I2FyAXFF$SyoooKYopRRmQdgSv3kQp0 -r

Do I know if I am doing this right? Thanks for all the help, Craig

Comment on DISA releases official ESX Security Technical Implementation Guide by Philip Morrison

Philip Morrison — Tue, 04 Nov 2008 20:35:13 +0000

Not sure I understand the question?

Comment on DISA releases official ESX Security Technical Implementation Guide by Givens

Givens — Tue, 04 Nov 2008 20:27:00 +0000

What is this?
AS-08-548 Security Technical Implementation Guidance (STIG)

Comment on Script to allow ESX to pass a DISA Security Readiness Review by Philip Morrison

Philip Morrison — Thu, 21 Aug 2008 22:35:21 +0000

I think I answered this in the VMTN but in case I didnt (ive been on a bunch of planes lately)…
/var/log/ESX_SRRSecure.timestamp should have the output of the results.

Comment on Script to allow ESX to pass a DISA Security Readiness Review by BacMan

BacMan — Thu, 21 Aug 2008 04:58:23 +0000

Thanks Philip.

Also, for the ESX script, is there a way to output the result to a log file for later review. As I have noticed when I ran the script it has some errors but it went by too fast. Or, is there a way to pause the script at certain point to see what is going on?

I am new to UNXIX and shell scripting. Thanks again for your help and much appreciated.

Cheers,