Disable Network Routing

MittelStufe 1Automatisiertsolaris

Beschreibung

The network routing daemon, in.routed, manages network routing tables. If enabled, it periodically supplies copies of the system's routing tables to any directly connected hosts and networks and picks up routes supplied to it from other networks and hosts. Routing Internet Protocol (RIP) is a legacy protocol with a number of security weaknesses including a lack of authentication, zoning, pruning, etc. Audit: ipv4/ipv6 routing and forwarding must be disabled both persistently and currently (routeadm -p).

So wird geprüft

Prüfmethode: Shell-Befehl

shell

command -v routeadm >/dev/null 2>&1 || exit 1; out=$(routeadm -p 2>/dev/null) || exit 1; r=compliant; for k in ipv4-routing ipv4-forwarding ipv6-routing ipv6-forwarding; do l=$(printf '%s\n' "$out" | grep "^$k "); case "$l" in *persistent=disabled*current=disabled*|*current=disabled*persistent=disabled*) ;; *) r="$k: $l";; esac; done; echo "$r"

Erwartete Ausgabe: compliant

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

routeadm -d ipv4-forwarding -d ipv4-routing -d ipv6-forwarding -d ipv6-routing; routeadm -u

Eigenschaften

Betriebssysteme: Beliebig
Tags: solarisnetwork
Referenz: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 3.17 Disable Network Routing

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target solaris