Ensure dhcp server services are not in use

MittelStufe 1Automatisiertlinux

Beschreibung

The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. There are two versions of the DHCP protocol DHCPv4 and DHCPv6. At startup the server may be started for one or the other via the -4 or -6 arguments.

So wird geprüft

Prüfmethode: Shell-Befehl

shell

alt0() { command -v rpm >/dev/null 2>&1 || { echo "step1: rpm not installed"; return 1; }; o=$(bash -c 'rpm -q dhcp-server' 2>&1); printf '%s\n' "$o" | tr -s ' \t' '  ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'package dhcp-server is not installed' || { echo step1: missing 'package dhcp-server is not installed'; return 1; }; }; alt1() { command -v grep >/dev/null 2>&1 || { echo "step1: grep not installed"; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step1: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-enabled dhcpd.service dhcpd6.service 2>/dev/null | grep '"'"'enabled'"'"'' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; command -v grep >/dev/null 2>&1 || { echo "step2: grep not installed"; return 1; }; command -v systemctl >/dev/null 2>&1 || { echo "step2: systemctl not installed"; return 1; }; o=$(bash -c 'systemctl is-active dhcpd.service dhcpd6.service 2>/dev/null | grep '"'"'^active'"'"'' 2>/dev/null); [ -z "$o" ] || { echo "step2: $o" | head -c 300; return 1; }; }; if alt0 || alt1; then echo compliant; fi

Erwartete Ausgabe: compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Run the following commands to stop dhcpd.service and dhcpd6.service and remove the dhcp-server package: # systemctl stop dhcpd.service dhcpd6.service # dnf remove dhcp-server - OR - - IF - the dhcp-server package is required as a dependency: Run the following commands to stop and mask dhcpd.service and dhcpd6.service: # systemctl stop dhcpd.service dhcpd6.service # systemctl mask dhcpd.service dhcpd6.service

Eigenschaften

Betriebssysteme: rocky-9
Tags: cis-convertedlinux
Referenz: CIS Rocky Linux 9 Benchmark v3.0.0 - 2.1.4

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target linux