Install tcp_wrappers Package
An XCCDF Rule
Description
When network services are using the xinetd service, the
tcp_wrappers package should be installed.
The tcp_wrappers package can be installed with the following command:
$ sudo zypper install tcp_wrappers
Rationale
Access control methods provide the ability to enhance system security posture by restricting services and known good IP addresses and address ranges. This prevents connections from unknown hosts and protocols.
- ID
- xccdf_org.ssgproject.content_rule_package_tcp_wrappers_installed
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[[packages]]
name = "tcpd"
version = "*"
Remediation - Ansible
- name: Ensure tcpd is installed
package:
name: tcpd
state: present
when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
tags:
Remediation - Puppet
include install_tcpd
class install_tcpd {
package { 'tcpd':
ensure => 'installed',
}
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
zypper install -y "tcpd"
else