Check: GEN007840
SUSE Linux Enterprise Server v11 for System z STIG:
GEN007840
(in versions v1 r12 through v1 r9)
Title
The DHCP client must be disabled if not needed. (Cat II impact)
Discussion
DHCP allows for the unauthenticated configuration of network parameters on the system by exchanging information with a DHCP server.
Check Content
Verify no interface is configured to use DHCP. # grep -i bootproto=dhcp /etc/sysconfig/network/ifcfg-* If any configuration is found, this is a finding.
Fix Text
Edit the /etc/sysconfig/network/ifcfg-* file(s) and change the "bootproto" setting to "static".
Additional Identifiers
Rule ID: SV-45987r1_rule
Vulnerability ID: V-22548
Group Title: GEN007840
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-000366 |
The organization implements the security configuration settings. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| CM-6 |
Configuration Settings |