STIGQter STIGQter: STIG Summary: Oracle Linux 6 Security Technical Implementation Guide Version: 1 Release: 17 Benchmark Date: 25 Oct 2019: The rdisc service must not be running.

DISA Rule

SV-65049r1_rule

Vulnerability Number

V-50843

Group Title

SRG-OS-000096

Rule Version

OL6-00-000268

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

The "rdisc" service implements the client side of the ICMP Internet Router Discovery Protocol (IRDP), which allows discovery of routers on the local subnet. If a router is discovered then the local routing table is updated with a corresponding default route. By default this daemon is disabled. The "rdisc" service can be disabled with the following commands:

# chkconfig rdisc off
# service rdisc stop

Check Contents

To check that the "rdisc" service is disabled in system boot configuration, run the following command:

# chkconfig "rdisc" --list

Output should indicate the "rdisc" service has either not been installed, or has been disabled at all runlevels, as shown in the example below:

# chkconfig "rdisc" --list
"rdisc" 0:off 1:off 2:off 3:off 4:off 5:off 6:off

Run the following command to verify "rdisc" is disabled through current runtime configuration:

# service rdisc status

If the service is disabled the command will return the following output:

rdisc is stopped

If the service is running, this is a finding.

Vulnerability Number

V-50843

Documentable

False

Rule Version

OL6-00-000268

Severity Override Guidance

To check that the "rdisc" service is disabled in system boot configuration, run the following command:

# chkconfig "rdisc" --list

Output should indicate the "rdisc" service has either not been installed, or has been disabled at all runlevels, as shown in the example below:

# chkconfig "rdisc" --list
"rdisc" 0:off 1:off 2:off 3:off 4:off 5:off 6:off

Run the following command to verify "rdisc" is disabled through current runtime configuration:

# service rdisc status

If the service is disabled the command will return the following output:

rdisc is stopped

If the service is running, this is a finding.

Check Content Reference

M

Target Key

2208

Comments