SV-50461r2_rule
V-38660
SRG-OS-999999
RHEL-06-000340
CAT II
10
Edit "/etc/snmp/snmpd.conf", removing any references to "v1", "v2c", or "com2sec". Upon doing that, restart the SNMP service:
# service snmpd restart
Verify the "snmp" package is installed:
# rpm -qa | grep -i snmp
net-snmp-5.7.1-31.2.x86_64.rpm
If the package is not installed, this is Not Applicable.
To ensure only SNMPv3 or newer is used, run the following command:
# grep 'v1\|v2c\|com2sec' /etc/snmp/snmpd.conf | grep -v '^#'
There should be no output.
If there is output, this is a finding.
V-38660
False
RHEL-06-000340
Verify the "snmp" package is installed:
# rpm -qa | grep -i snmp
net-snmp-5.7.1-31.2.x86_64.rpm
If the package is not installed, this is Not Applicable.
To ensure only SNMPv3 or newer is used, run the following command:
# grep 'v1\|v2c\|com2sec' /etc/snmp/snmpd.conf | grep -v '^#'
There should be no output.
If there is output, this is a finding.
M
2367