Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The snmpd service must use only SNMP protocol version 3 or newer.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The snmpd service must use only SNMP protocol version 3 or newer.

Description

Discussion Text

Earlier versions of SNMP are considered insecure, as they potentially allow unauthorized access to detailed system management information.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-209042

Rule

SV-209042r793763_rule

Severity

medium

Rule Version

OL6-00-000340

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

To ensure only SNMPv3 or newer is used, run the following command: 

# grep 'v1\|v2c\|com2sec' /etc/snmp/snmpd.conf | grep -v '^#'

There should be no output. 
If there is output, this is a finding.

Implementation Procedure

Fix Text

Edit "/etc/snmp/snmpd.conf", removing any references to "v1", "v2c", or "com2sec". Upon doing that, restart the SNMP service: 

# service snmpd restart

STIG check 175 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-209041The FTP daemon must be configured for logging or verbose mode.Next · V-209043 →The snmpd service must not use a default password.