UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The system must not have IP tunnels configured.


Overview

Finding ID Version Rule ID IA Controls Severity
V-22547 GEN007820 SV-45986r1_rule Medium
Description
IP tunneling mechanisms can be used to bypass network filtering.
STIG Date
SUSE Linux Enterprise Server v11 for System z 2016-12-20

Details

Check Text ( C-43267r1_chk )
Check for any IP tunnels.
# ip tun list
# ip -6 tun list
If any tunnels are listed, this is a finding.
Fix Text (F-39350r1_fix)
Remove the tunnels.
# ip tun del
Edit system startup scripts to prevent tunnel creation on startup.