TMAegis
更多 cos 规则

Container-Optimized OS

TMA-COS-3.3.3

Ensure iptables is installed

中级别 1人工审核cos

说明

iptables allows configuration of the IPv4 and IPv6 tables in the linux kernel and the rules stored within them. Most firewall configuration utilities operate as a front end to iptables. iptables is required for firewall management and configuration.

检查方式

审计方法: 人工审核

此项建议无法自动检查。当您传入 --include-manual 时,扫描结果会列出该项并附带这些说明。

Run the following command and verify iptables is installed: grep '\"name\": \"iptables\"' /etc/cos-package-info.json "name": "iptables"

修复方式

修复方法: 操作指南或基础设施补丁

Update to an OS image that includes the iptables package.

属性

操作系统
任意
标签
container-optimized-oscos
参考
CIS Google Container-Optimized OS Benchmark v1.2.0 - 3.3.3 Ensure iptables is installed