Oracle Linux 6 Security Technical Implementation Guide

The Oracle Linux 6 Security Technical Implementation Guide (V2 R7) has 267 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

267STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R7

CurrentPublished Thu Jan 26 2023

The operating system must prevent public IPv6 access into an organizations internal networks, except as appropriately mediated by managed interfaces employing boundary protection devices.

Oracle Linux 6 Security Technical Implementation Guide

Assessment Title

Rule Text

The operating system must prevent public IPv6 access into an organizations internal networks, except as appropriately mediated by managed interfaces employing boundary protection devices.

Description

Discussion Text

The "ip6tables" service provides the system's host-based firewalling capability for IPv6 and ICMPv6.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-219550

Rule

SV-219550r793807_rule

Severity

medium

Rule Version

OL6-00-000107

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

If the system is a cross-domain system, this is not applicable.

If IPv6 is disabled, this is not applicable.

Run the following command to determine the current status of the "ip6tables" service:

# service ip6tables status

If the service is not running, it should return the following:

ip6tables: Firewall is not running.

If the service is not running, this is a finding.

Implementation Procedure

Fix Text

The "ip6tables" service can be enabled with the following commands: 

# chkconfig ip6tables on
# service ip6tables start

STIG check 219 of 267 in the Oracle Linux 6 STIG checklist

← Previous · V-219549The operating system must connect to external networks or information systems only through managed IPv6 interfaces consisting of boundary protection devices arranged in accordance with an organizational security architecture.Next · V-219551 →The system must employ a local IPv4 firewall.