[PATCH] added SNMP configuration rule

David Smith dsmith at eclipse.ncsc.mil
Wed Oct 24 16:07:26 UTC 2012


You're right, I got into too much of a hurry and left out the /snmp/.  
Fixing that now.

On 10/24/2012 11:02 AM, Shawn Wells wrote:
> On 10/24/12 9:06 AM, David Smith wrote:
>> +
>> +<Rule id="snmpd_configuration_guidance" severity="medium">
>> +<title>The SNMP Service Must Use only SNMPv3 or Newer </title>
>> +<description>
>> +Edit <tt>/etc/snmpd.conf</tt>, removing any references to 
>> <tt>v1</tt>, <tt>v2c</tt>, <tt>community</tt>, or <tt>com2sec</tt>.
>> +Upon doing that, restart the SNMP service:
>> +<pre># service snmpd restart</pre>
>> +</description>
>> +<ocil clause="there is output">
>> +To ensure only SNMPv3 or newer is used, run the following command:
>> +<pre># grep 'v1\|v2c\|community\|com2sec' /etc/snmpd.conf</pre>
>> +There should be no output.
>
> nack
>
> Config file is in /etc/snmp/snmpd.conf with RHEL6
>
> _______________________________________________
> scap-security-guide mailing list
> scap-security-guide at lists.fedorahosted.org
> https://lists.fedorahosted.org/mailman/listinfo/scap-security-guide



More information about the scap-security-guide mailing list