RHEL-06-000292 - The DHCP client must be disabled if not needed

Shawn Wells shawn at redhat.com
Fri Aug 23 18:49:43 UTC 2013


On 8/22/13 2:11 PM, Robert Sanders wrote:
> Quick question on this one.  If I follow the prose directory then any 
> interface on the system that doesn't have a file in 
> /etc/sysconfig/network-scripts is a finding.  On my box I've got the 
> virbr0 and virbr0-nic interfaces due to the virtualization stuff 
> installed.  Should there be some language in here related to these 
> virtual nics?


I've been flip flopping on this since yesterday.... Since existing STIG 
is for RHEL6 Servers, not RHEL6-based hypervisors, I'm inclined to say 
existing check should remain as is, with a net-new added for RHEL6 as a 
hypervisor (KVM, OpenStack, RHEV, etc).

What do you think?


More information about the scap-security-guide mailing list