Disable Network Routing

MediaNivel 1Automatizadasolaris

Descripción

The network routing daemon, in.routed, manages network routing tables. If enabled, it periodically supplies copies of the system's routing tables to any directly connected hosts and networks and picks up routes supplied to it from other networks and hosts. Routing Internet Protocol (RIP) is a legacy protocol with a number of security weaknesses including a lack of authentication, zoning, pruning, etc. Audit: ipv4/ipv6 routing and forwarding must be disabled both persistently and currently (routeadm -p).

Cómo se verifica

Método de auditoría: Comando de shell

shell

command -v routeadm >/dev/null 2>&1 || exit 1; out=$(routeadm -p 2>/dev/null) || exit 1; r=compliant; for k in ipv4-routing ipv4-forwarding ipv6-routing ipv6-forwarding; do l=$(printf '%s\n' "$out" | grep "^$k "); case "$l" in *persistent=disabled*current=disabled*|*current=disabled*persistent=disabled*) ;; *) r="$k: $l";; esac; done; echo "$r"

Salida esperada: compliant

Cómo se corrige

Método de corrección: Guía o parche de infraestructura

routeadm -d ipv4-forwarding -d ipv4-routing -d ipv6-forwarding -d ipv6-routing; routeadm -u

Propiedades

Sistemas operativos: Cualquiera
Etiquetas: solarisnetwork
Referencia: CIS Oracle Solaris 11.4 Benchmark v1.1.0 - 3.17 Disable Network Routing

Verificar este host

Ejecute esto en un equipo que tenga permiso para auditar. El escaneo es de solo lectura.

shell

tmaegis scan --target solaris