TMA-FREEBSD-3.4.1.2
Ensure a single firewall utility is in use
Opis
FreeBSD ships with multiple firewall utilities, providing uses with options to best suit their environment. This section provides guidance to ensure that only one firewall utility is implemented. The use of more than one firewall utility may produce unexpected results. Audit: exactly one of firewall_enable (ipfw), ipfilter_enable or pf_enable must be YES.
Kako se proverava
Metod provere: Komanda ljuske
command -v sysrc >/dev/null 2>&1 || exit 1; n=0; for k in firewall_enable ipfilter_enable pf_enable; do v=$(sysrc -q -n $k 2>/dev/null); case "$v" in [Yy][Ee][Ss]|[Tt][Rr][Uu][Ee]|[Oo][Nn]|1) n=$((n+1));; esac; done; [ "$n" -eq 1 ] && echo compliant || echo "$n firewall utilities enabled"- Očekivani izlaz
compliant
Kako se ispravlja
Metod ispravke: Smernica ili zakrpa infrastrukture
Run the following script to ensure that a single firewall utility is in use on the system. If more than one firewall utility was found to be running then all other services except the desired one should be stopped and disabled. For ipfilter run: # service ipfilter stop # service ipfilter disable For ipfw run: # service firewall stop # service firewall disable For pf run: # service pf stop # service pf disable
Svojstva
- Operativni sistemi
- Bilo koji
- Oznake
- freebsdnetwork
- Referenca
- CIS FreeBSD 14 Benchmark v1.0.1 - 3.4.1.2 Ensure a single firewall utility is in use
Proverite ovaj računar
Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.
tmaegis scan --target freebsd