← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-22548

CAT II (Medium)

The DHCP client must be disabled if not needed.

Rule ID

SV-45987r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-000366

Discussion

DHCP allows for the unauthenticated configuration of network parameters on the system by exchanging information with a DHCP server.

Check Content

Verify no interface is configured to use DHCP.
# grep -i bootproto=dhcp /etc/sysconfig/network/ifcfg-*

If any configuration is found, this is a finding.

Fix Text

Edit the /etc/sysconfig/network/ifcfg-* file(s) and change the "bootproto" setting to "static".