So I am working on an issue which involves File Restore from a backup solution to a VMware VM.
The connection between Backup appliance and VM is not available directly so it speaks to ESX via 443 and then ESX hands it down to VM is what I presume.
I see the below line in the backup log:
API-returned file upload URL: https://x.y.z.z:443/guestFile?id=11&token=52bfaacf-db7c-6903-c486-f0a0821cdfd211
Now, in ESX logs it says:
2020-10-07T14:58:40.343Z info hostd[2098639] [Originator@6876 sub=Guestsvc.GuestFileHandler] Guest File Path is /tmp/vmware-root_17958-559601619/rubrik_vmware74/files.tgz
2020-10-07T14:58:40.434Z info hostd[2098640] [Originator@6876 sub=Libs] HGFileCopyCreateSessionCB: Successfully created the session.
2020-10-07T14:58:41.143Z info hostd[2099266] [Originator@6876 sub=Vmsvc.vm:/vmfs/volumes/5f6d9c4e-3d1d4a81-b1b1-000c292d70d4/DBS-Test/DBS-Test.vmx opID=724b366b-41-2d43 user=vpxuser:VSPHERE.LOCAL\Administrator] State Transition (VM_STATE_ON -> VM_STATE_GUEST_OPERATION)
2020-10-07T14:58:41.253Z info hostd[2143774] [Originator@6876 sub=Vimsvc.ha-eventmgr] Event 507 : Guest operation Start Program performed on Virtual machine VM-Test
2020-10-07T14:58:41.254Z info hostd[2143774] [Originator@6876 sub=Vmsvc.vm:/vmfs/volumes/5f6d9c4e-3d1d4a81-b1b1-000c292d70d4/DBS-Test/DBS-Test.vmx] State Transition (VM_STATE_GUEST_OPERATION -> VM_STATE_ON)
What I am curious is how is ESX handing these down to the VM. (Open VM Tools is installed on this RHEL 7.7)
If it is done via some API do we know what the endpoint is?
Or:
Is there any way in RHEL 7.7 with OpenVMTools to not allow remote command executions?
Thanks.