Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22549 | GEN007850 | SV-26933r2_rule | Medium |
Description |
---|
Dynamic DNS updates transmit unencrypted information about a system including its name and address and should not be used unless needed. |
STIG | Date |
---|---|
Red Hat Enterprise Linux 5 Security Technical Implementation Guide | 2016-06-01 |
Check Text ( C-27883r2_chk ) |
---|
If the "dhclient" package is not installed, this is not applicable. Verify the DHCP client is configured to not send dynamic DNS updates. Procedure: # grep do-forward-updates /etc/dhclient.conf If the file is not present, does not contain this configuration, or has the setting set to "true", this is a finding. |
Fix Text (F-24178r1_fix) |
---|
Edit or add the "/etc/dhclient.conf" file and add or edit the "do-forward-updates" setting to false. Procedure: # echo "do-forward-updates false;" >> /etc/dhclient.conf |