Linux distributions
TMA-RHEL10-2.1.4
Ensure dhcp server services are not in use
Description
The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. There are two versions of the DHCP protocol DHCPv4 and DHCPv6. At startup the server may be started for one or the other via the -4 or -6 arguments.
Méthode de vérification
Méthode d'audit: Commande shell
alt0() { command -v rpm >/dev/null 2>&1 || { echo "step1: rpm not installed"; return 1; }; o=$(bash -c 'rpm -q kea' 2>&1); printf '%s\n' "$o" | tr -s ' \t' ' ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'package kea is not installed' || { echo step1: missing 'package kea is not installed'; return 1; }; }; alt1() { o=$(bash -c 'systemctl show kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service -p UnitFileState,ActiveState | grep -Pi '"'"'=(enabled|active)'"'"'' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0 || alt1; then echo compliant; fi- Sortie attendue
compliant
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Run the following commands to stop kea-dhcp-ddns.service, kea-dhcp4.service, and kea-dhcp6.service and remove the kea package: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # dnf remove kea - OR - - IF - the kea package is required as a dependency: Run the following commands to stop and mask kea-dhcp-ddns.service, kea- dhcp4.service, and kea-dhcp6.service: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # systemctl mask kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service
Propriétés
- Systèmes d'exploitation
- rhel-10
- Étiquettes
- cis-convertedlinux
- Référence
- CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 2.1.4
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
tmaegis scan --target linux