RHEL-06-000292 - The DHCP client must be disabled if not needed
Shawn Wells
shawn at redhat.com
Fri Aug 23 18:49:43 UTC 2013
On 8/22/13 2:11 PM, Robert Sanders wrote:
> Quick question on this one. If I follow the prose directory then any
> interface on the system that doesn't have a file in
> /etc/sysconfig/network-scripts is a finding. On my box I've got the
> virbr0 and virbr0-nic interfaces due to the virtualization stuff
> installed. Should there be some language in here related to these
> virtual nics?
I've been flip flopping on this since yesterday.... Since existing STIG
is for RHEL6 Servers, not RHEL6-based hypervisors, I'm inclined to say
existing check should remain as is, with a net-new added for RHEL6 as a
hypervisor (KVM, OpenStack, RHEV, etc).
What do you think?
More information about the scap-security-guide
mailing list