SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

The SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide (V1 R12) has 550 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

550STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R12

CurrentPublished Fri Oct 26 2018

Network interfaces must not be configured to allow user control.

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Assessment Title

Rule Text

Network interfaces must not be configured to allow user control.

Description

Discussion Text

Configuration of network interfaces should be limited to privileged users. Manipulation of network interfaces may result in a Denial of Service or bypass of network security mechanisms.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-22408

Rule

SV-45718r1_rule

Severity

medium

Rule Version

GEN003581

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Check the system for user-controlled network interfaces.
# grep -i '^USERCONTROL=' /etc/sysconfig/network/ifcfg* | grep -i yes
If any results are returned with USERCONTROL set to yes, this is a finding.

Implementation Procedure

Fix Text

Edit the configuration for the user-controlled interface and change the USERCONTROL=’yes’ value to ‘no’.

STIG check 172 of 550 in the SUSE Linux Enterprise Server v11 for System z STIG checklist

← Previous · V-22407The kernel core dump data directory must not have an extended ACL.Next · V-22409 →The system must not process Internet Control Message Protocol (ICMP) timestamp requests.