STIGQter: STIG Summary: Tri-Lab Operating System Stack (TOSS) 5 Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 Mar 2026:

The firewalld service on TOSS 5 must be active.

DISA Rule

SV-282486r1200438_rule

Vulnerability Number

V-282486

Group Title

SRG-OS-000096-GPOS-00050

Rule Version

TOSS-05-000193

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.
• CCI-002314 - Employ automated mechanisms to control remote access methods.

Weight

10

Fix Recommendation

Enable the "firewalld" service using the following command:

$ sudo systemctl enable --now firewalld

Check Contents

Verify "firewalld" is active using the following command:

$ systemctl is-active firewalld

active

If the "firewalld" service is not active, this is a finding.

Vulnerability Number

V-282486

Documentable

False

Rule Version

TOSS-05-000193

Severity Override Guidance

Verify "firewalld" is active using the following command:

$ systemctl is-active firewalld

active

If the "firewalld" service is not active, this is a finding.

Check Content Reference

M

Target Key

5738