FreeBSD
TMA-FREEBSD-3.4.1.2
Ensure a single firewall utility is in use
Опис
FreeBSD ships with multiple firewall utilities, providing uses with options to best suit their environment. This section provides guidance to ensure that only one firewall utility is implemented. The use of more than one firewall utility may produce unexpected results. Audit: exactly one of firewall_enable (ipfw), ipfilter_enable or pf_enable must be YES.
Како се проверава
Метод провере: Команда љуске
command -v sysrc >/dev/null 2>&1 || exit 1; n=0; for k in firewall_enable ipfilter_enable pf_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) n=$((n+1));; esac; done; [ "$n" -eq 1 ] && echo compliant || echo "$n firewall utilities enabled"- Очекивани излаз
compliant
Како се исправља
Метод исправке: Смерница или закрпа инфраструктуре
Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled. For ipfilter run: # service ipfilter stop # service ipfilter disable For ipfw run: # service firewall stop # service firewall disable For pf run: # service pf stop # service pf disable
Својства
- Оперативни системи
- Било који
- Ознаке
- freebsdnetwork
- Референца
- CIS FreeBSD 14 Benchmark v1.0.1 - 3.4.1.2 Ensure a single firewall utility is in use
Проверите овај рачунар
Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.
tmaegis scan --target freebsd