BaselineWatch
Apply as published
Desk

Linux RHEL-10-200531

DISA STIG RHEL-10-200531 (CAT II): RHEL 10 must have the "firewalld" service set to active.

DISA STIG recommends

RHEL-10-200531 CAT II

RHEL 10 must have the "firewalld" service set to active.

NIST SP 800-53: AC-17(1), CM-7

Check

Verify RHEL 10 is configured so that "firewalld" is active with the following command: $ systemctl is-active firewalld active If the "firewalld" service is not active, this is a finding.

Fix

Configure RHEL 10 to have the "firewalld" service set to active. To enable the "firewalld" service, run the following command: $ sudo systemctl enable --now firewalld

Our decision

Apply as published

No decision recorded: the recommendation stands. The owner signs in to change it.

All Linux decisions · The Linux baseline · The Linux test plan