Linux distributions
TMA-RHEL10-2.1.4
Ensure dhcp server services are not in use
Beschreibung
The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. There are two versions of the DHCP protocol DHCPv4 and DHCPv6. At startup the server may be started for one or the other via the -4 or -6 arguments.
So wird geprüft
Prüfmethode: Shell-Befehl
alt0() { command -v rpm >/dev/null 2>&1 || { echo "step1: rpm not installed"; return 1; }; o=$(bash -c 'rpm -q kea' 2>&1); printf '%s\n' "$o" | tr -s ' \t' ' ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'package kea is not installed' || { echo step1: missing 'package kea is not installed'; return 1; }; }; alt1() { o=$(bash -c 'systemctl show kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service -p UnitFileState,ActiveState | grep -Pi '"'"'=(enabled|active)'"'"'' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0 || alt1; then echo compliant; fi- Erwartete Ausgabe
compliant
So wird behoben
Behebungsmethode: Anleitung oder Infrastruktur-Patch
Run the following commands to stop kea-dhcp-ddns.service, kea-dhcp4.service, and kea-dhcp6.service and remove the kea package: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # dnf remove kea - OR - - IF - the kea package is required as a dependency: Run the following commands to stop and mask kea-dhcp-ddns.service, kea- dhcp4.service, and kea-dhcp6.service: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # systemctl mask kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service
Eigenschaften
- Betriebssysteme
- rhel-10
- Tags
- cis-convertedlinux
- Referenz
- CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 2.1.4
Diesen Host prüfen
Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.
tmaegis scan --target linux