← Back to SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

V-22582

CAT II (Medium)

The system must employ a local firewall.

Rule ID

SV-46049r1_rule

STIG

SUSE Linux Enterprise Server v11 for System z Security Technical Implementation Guide

Version

V1R12

CCIs

CCI-001118

Discussion

A local firewall protects the system from exposing unnecessary or undocumented network services to the local enclave. If a system within the enclave is compromised, firewall protection on an individual system continues to protect it from attack.

Check Content

Determine if the system is using a local firewall.
# rcSuSEfirewall2 status
If the service is not "running”, this is a finding.

Fix Text

Enable the system's local firewall.
# rcSuSEfirewall2 start
# insserv SuSEfirewall2_init
# insserv SuSEfirewall2_setup