{"action":"created","issue":{"url":"https://api.github.com/repos/vmware/open-vm-tools/issues/288","repository_url":"https://api.github.com/repos/vmware/open-vm-tools","labels_url":"https://api.github.com/repos/vmware/open-vm-tools/issues/288/labels{/name}","comments_url":"https://api.github.com/repos/vmware/open-vm-tools/issues/288/comments","events_url":"https://api.github.com/repos/vmware/open-vm-tools/issues/288/events","html_url":"https://github.com/vmware/open-vm-tools/issues/288","id":357557922,"node_id":"MDU6SXNzdWUzNTc1NTc5MjI=","number":288,"title":"non-root user can change the VM's configuration by vmtoolsd --cmd ","user":{"login":"sunshaoshuai01","id":43029948,"node_id":"MDQ6VXNlcjQzMDI5OTQ4","avatar_url":"https://avatars3.githubusercontent.com/u/43029948?v=4","gravatar_id":"","url":"https://api.github.com/users/sunshaoshuai01","html_url":"https://github.com/sunshaoshuai01","followers_url":"https://api.github.com/users/sunshaoshuai01/followers","following_url":"https://api.github.com/users/sunshaoshuai01/following{/other_user}","gists_url":"https://api.github.com/users/sunshaoshuai01/gists{/gist_id}","starred_url":"https://api.github.com/users/sunshaoshuai01/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sunshaoshuai01/subscriptions","organizations_url":"https://api.github.com/users/sunshaoshuai01/orgs","repos_url":"https://api.github.com/users/sunshaoshuai01/repos","events_url":"https://api.github.com/users/sunshaoshuai01/events{/privacy}","received_events_url":"https://api.github.com/users/sunshaoshuai01/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":2,"created_at":"2018-09-06T08:54:10Z","updated_at":"2018-09-07T23:31:19Z","closed_at":null,"author_association":"NONE","body":"I found even a non-root user can change the VM's configuration by vmtoolsd --cmd.\r\nIf you reboot the VM after info-set, the setting will be updated to VMX file permanently.\r\nIs it a correct action?\r\nCan we disable the changing for non-root user(or for all users) by any setting?\r\n\r\n`\r\n$ vmtoolsd --cmd 'info-get guestinfo.interface.1.ip.0.address'\r\n10.67.254.132/24\r\n\r\n$ vmtoolsd --cmd 'info-set guestinfo.interface.1.ip.0.address 10.67.254.232/24'\r\n$ vmtoolsd --cmd 'info-get guestinfo.interface.1.ip.0.address'\r\n10.67.254.232/24\r\n\r\n$ vmtoolsd --cmd 'info-set guestinfo.interface.1.ip.0.address 10.67.254.132/24'\r\n$ vmtoolsd --cmd 'info-get guestinfo.interface.1.ip.0.address'\r\n10.67.254.132/24\r\n\r\n$ cat /etc/redhat-release\r\nCentOS Linux release 7.5.1804 (Core)\r\n$ uname -r\r\n3.10.0-862.9.1.el7.x86_64\r\n$ rpm -q open-vm-tools\r\nopen-vm-tools-10.1.10-3.el7_5.1.x86_64\r\n`"},"comment":{"url":"https://api.github.com/repos/vmware/open-vm-tools/issues/comments/419592216","html_url":"https://github.com/vmware/open-vm-tools/issues/288#issuecomment-419592216","issue_url":"https://api.github.com/repos/vmware/open-vm-tools/issues/288","id":419592216,"node_id":"MDEyOklzc3VlQ29tbWVudDQxOTU5MjIxNg==","user":{"login":"ravindravmw","id":7410128,"node_id":"MDQ6VXNlcjc0MTAxMjg=","avatar_url":"https://avatars3.githubusercontent.com/u/7410128?v=4","gravatar_id":"","url":"https://api.github.com/users/ravindravmw","html_url":"https://github.com/ravindravmw","followers_url":"https://api.github.com/users/ravindravmw/followers","following_url":"https://api.github.com/users/ravindravmw/following{/other_user}","gists_url":"https://api.github.com/users/ravindravmw/gists{/gist_id}","starred_url":"https://api.github.com/users/ravindravmw/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ravindravmw/subscriptions","organizations_url":"https://api.github.com/users/ravindravmw/orgs","repos_url":"https://api.github.com/users/ravindravmw/repos","events_url":"https://api.github.com/users/ravindravmw/events{/privacy}","received_events_url":"https://api.github.com/users/ravindravmw/received_events","type":"User","site_admin":false},"created_at":"2018-09-07T23:31:19Z","updated_at":"2018-09-07T23:31:19Z","author_association":"CONTRIBUTOR","body":"> Any advice about this?\r\n\r\nvSphere 6.0 and later will work for this. Let's first make sure you entered the value correctly. I'm not sure which client did you use, but please make sure to *not* specify double quotes around the key or the value.\r\n\r\n> Which version did you use in your test?\r\n\r\nI used the latest 6.7. I also verified it with 6.0 the same build as yours. When you get to a 6.0 ESXi host's IP address, along with lots of other link you get following links:\r\n\r\no Download vSphere Client for Windows\r\no Open the VMware Host Client\r\n\r\nI clicked the second link and went to \"Edit Settings\" for the VM. Under \"Edit Settings\", I navigated through \"VM Options\" > \"Advanced\" > \"Configuration Parameters\" > \"Edit Configuration\" > \"Add parameter\". I could add the new key \"guest_rpc.rpci.auth.cmd.info-set\" (without quotes) and value \"TRUE\" (without quotes).\r\n\r\nFYI, this configuration can be changed for a powered on VM too, but it will not take effect unless VM is powered off/on or suspended/resumed or vMotioned.\r\n\r\n> Is there detailed document about GuestVariables?\r\n\r\nUnfortunately, there is not much up-to-date documentation. But, you can search the internet for \"guest variables\" or \"guestinfo variables\" and find some old documents. Please let us know if you still have any questions."}}
{"actor":{"display_login":"ravindravmw"}}