Install iptables-services Package
An XCCDF Rule
Description
The iptables-services package can be installed with the following command:
$ sudo yum install iptables-services
Rationale
iptables-services provides the services iptables and ip6tables that have been split
out of the base package since they are not active by default anymore.
These services load the iptables rules during the system startup and also allow one to reload
the iptables rules during runtime.
- ID
- xccdf_org.ssgproject.content_rule_package_iptables-services_installed
- Severity
- Medium
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --add=iptables-services
Remediation - OS Build Blueprint
[[packages]]
name = "iptables-services"
version = "*"
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- NIST-800-53-CM-6(a)
- enable_strategy
Remediation - Puppet
include install_iptables-services
class install_iptables-services {
package { 'iptables-services':
ensure => 'installed',
}
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q iptables; then
if ! rpm -q --quiet "iptables-services" ; then
yum install -y "iptables-services"
fi