Linux RHEL-10-200531
DISA STIG RHEL-10-200531 (CAT II): RHEL 10 must have the "firewalld" service set to active.
DISA STIG recommends
RHEL-10-200531 CAT II
RHEL 10 must have the "firewalld" service set to active.
NIST SP 800-53: AC-17(1), CM-7
Check
Verify RHEL 10 is configured so that "firewalld" is active with the following command: $ systemctl is-active firewalld active If the "firewalld" service is not active, this is a finding.
Fix
Configure RHEL 10 to have the "firewalld" service set to active. To enable the "firewalld" service, run the following command: $ sudo systemctl enable --now firewalld
Our decision
Apply as published
No decision recorded: the recommendation stands. The owner signs in to change it.
All Linux decisions · The Linux baseline · The Linux test plan