Skip to content
Log In

Install tcp_wrappers Package

An XCCDF Rule

Description

When network services are using the xinetd service, the tcp_wrappers package should be installed. The tcp_wrappers package can be installed with the following command: 
$ sudo yum install tcp_wrappers

Rationale

Access control methods provide the ability to enhance system security posture by restricting services and known good IP addresses and address ranges. This prevents connections from unknown hosts and protocols.

ID
xccdf_org.ssgproject.content_rule_package_tcp_wrappers_installed
Severity
Medium
References
Updated

Remediation Templates

Anaconda Pre-Install Instructions

package --add=tcp_wrappers

OS Build Blueprint

[[packages]]
name = "tcp_wrappers"
version = "*"

An Ansible Snippet

- name: Ensure tcp_wrappers is installed
  package:
    name: tcp_wrappers
    state: present
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags:

A Puppet Snippet

include install_tcp_wrappers
class install_tcp_wrappers {
  package { 'tcp_wrappers':
    ensure => 'installed',
  }
}

A Shell Script

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
if ! rpm -q --quiet "tcp_wrappers" ; then
    yum install -y "tcp_wrappers"
fi