Navigate

Check: GEN000000-LNX007620

VMware ESX 3 Server: GEN000000-LNX007620 (in version v1 r2)

Title

The PF_LLC protocol handler must not be installed. (Cat II impact)

Discussion

The Packet Family - Logical Link Control (PF_LLC) protocol handler provides a sockets interface for applications to communicate over the LLC sublayer. This interface is not commonly used and may increase the attack surface of the system.

Check Content

If the PF_LLC protocol handler is not available as an optional software package for the system, this is not applicable. If the PF_LLC protocol handler is installed, this is a finding.

Fix Text

Uninstall the PF_LLC protocol handler.

Additional Identifiers

Rule ID: SV-26212r1_rule

Vulnerability ID: V-22537

Group Title: GEN000000-LNX007620

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000032	The information system enforces information flow control using organization-defined security policy filters as a basis for flow control decisions for organization-defined information flows.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
AC-4 (8)	Security Policy Filters