Install tcp_wrappers Package
An XCCDF Rule
Description
When network services are using the xinetd service, the
tcp_wrappers package should be installed.
The tcp_wrappers package can be installed with the following command:
$ sudo yum install tcp_wrappers
Rationale
Access control methods provide the ability to enhance system security posture by restricting services and known good IP addresses and address ranges. This prevents connections from unknown hosts and protocols.
- ID
- xccdf_org.ssgproject.content_rule_package_tcp_wrappers_installed
- Severity
- Medium
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --add=tcp_wrappers
Remediation - OS Build Blueprint
[[packages]]
name = "tcp_wrappers"
version = "*"
Remediation - Ansible
- name: Ensure tcp_wrappers is installed
package:
name: tcp_wrappers
state: present
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
Remediation - Puppet
include install_tcp_wrappers
class install_tcp_wrappers {
package { 'tcp_wrappers':
ensure => 'installed',
}
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
if ! rpm -q --quiet "tcp_wrappers" ; then
yum install -y "tcp_wrappers"
fi