STIGQter: STIG Summary: Red Hat Enterprise Linux 10 Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Jul 2026:

RHEL 10 must have the "firewalld" service set to active.

DISA Rule

SV-280956r1165223_rule

Vulnerability Number

V-280956

Group Title

SRG-OS-000096-GPOS-00050

Rule Version

RHEL-10-200531

Severity

CAT II

CCI(s)

CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.
CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

Fix Recommendation

Configure RHEL 10 to have the "firewalld" service set to active.

To enable the "firewalld" service, run the following command:

$ sudo systemctl enable --now firewalld

Check Contents

Verify RHEL 10 is configured so that "firewalld" is active with the following command:

$ systemctl is-active firewalld
active

If the "firewalld" service is not active, this is a finding.

Vulnerability Number

V-280956

Documentable

False

Rule Version

RHEL-10-200531

Severity Override Guidance

Verify RHEL 10 is configured so that "firewalld" is active with the following command:

$ systemctl is-active firewalld
active

If the "firewalld" service is not active, this is a finding.

Check Content Reference

Target Key

5733