Network interfaces must not be configured to allow user control.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22408	GEN003581	SV-45718r1_rule		Medium

Description
Configuration of network interfaces should be limited to privileged users. Manipulation of network interfaces may result in a Denial of Service or bypass of network security mechanisms.

STIG	Date
SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide	2018-09-19

Details

Check Text ( C-43084r1_chk )
Check the system for user-controlled network interfaces. # grep -i '^USERCONTROL=' /etc/sysconfig/network/ifcfg* | grep -i yes If any results are returned with USERCONTROL set to yes, this is a finding.

Fix Text (F-39116r1_fix)
Edit the configuration for the user-controlled interface and change the USERCONTROL=’yes’ value to ‘no’.