Linux distributions
TMA-RHEL10-2.1.4
Ensure dhcp server services are not in use
Açıklama
The Dynamic Host Configuration Protocol (DHCP) is a service that allows machines to be dynamically assigned IP addresses. There are two versions of the DHCP protocol DHCPv4 and DHCPv6. At startup the server may be started for one or the other via the -4 or -6 arguments.
Nasıl denetlenir
Denetim yöntemi: Kabuk komutu
alt0() { command -v rpm >/dev/null 2>&1 || { echo "step1: rpm not installed"; return 1; }; o=$(bash -c 'rpm -q kea' 2>&1); printf '%s\n' "$o" | tr -s ' \t' ' ' | sed 's/^ //;s/ $//' | grep -Fxq -- 'package kea is not installed' || { echo step1: missing 'package kea is not installed'; return 1; }; }; alt1() { o=$(bash -c 'systemctl show kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service -p UnitFileState,ActiveState | grep -Pi '"'"'=(enabled|active)'"'"'' 2>/dev/null); [ -z "$o" ] || { echo "step1: $o" | head -c 300; return 1; }; }; if alt0 || alt1; then echo compliant; fi- Beklenen çıktı
compliant
Nasıl düzeltilir
Düzeltme yöntemi: Kılavuz veya altyapı yaması
Run the following commands to stop kea-dhcp-ddns.service, kea-dhcp4.service, and kea-dhcp6.service and remove the kea package: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # dnf remove kea - OR - - IF - the kea package is required as a dependency: Run the following commands to stop and mask kea-dhcp-ddns.service, kea- dhcp4.service, and kea-dhcp6.service: # systemctl stop kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service # systemctl mask kea-dhcp-ddns.service kea-dhcp4.service kea-dhcp6.service
Özellikler
- İşletim sistemleri
- rhel-10
- Etiketler
- cis-convertedlinux
- Referans
- CIS Red Hat Enterprise Linux 10 Benchmark v1.0.1 - 2.1.4
Bu ana makineyi denetle
Bunu denetleme izniniz olan bir makinede çalıştırın. Tarama salt okunurdur.
tmaegis scan --target linux