File: rule.yml

package info (click to toggle)
scap-security-guide 0.1.78-1
  • links: PTS, VCS
  • area: main
  • in suites: forky, sid
  • size: 114,600 kB
  • sloc: xml: 245,305; sh: 84,381; python: 33,093; makefile: 27
file content (44 lines) | stat: -rw-r--r-- 1,155 bytes parent folder | download
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
documentation_complete: true


title: 'Disable Quagga Service'

description: |-
    {{{ describe_service_disable(service="zebra") }}}

rationale: |-
    Routing protocol daemons are typically used on routers to exchange network
    topology information with other routers. If routing daemons are used when not
    required, system network information may be unnecessarily transmitted across
    the network.

severity: medium

identifiers:
    cce@rhel8: CCE-80889-9
    cce@sle15: CCE-91418-4


references:
    cis-csc: 12,15,8
    cobit5: APO13.01,DSS05.02
    hipaa: 164.308(a)(4)(i),164.308(b)(1),164.308(b)(3),164.310(b),164.312(e)(1),164.312(e)(2)(ii)
    isa-62443-2013: 'SR 3.1,SR 3.5,SR 3.8,SR 4.1,SR 4.3,SR 5.1,SR 5.2,SR 5.3,SR 7.1,SR 7.6'
    iso27001-2013: A.13.1.1,A.13.2.1,A.14.1.3
    nist: CM-7(a),CM-7(b),CM-6(a)
    nist-csf: PR.PT-4
    srg: SRG-OS-000480-GPOS-00227

ocil_clause: |-
    {{{ ocil_clause_service_disabled(service="zebra") }}}

ocil: |-
    {{{ ocil_service_disabled(service="zebra") }}}

platform: system_with_kernel

template:
    name: service_disabled
    vars:
        servicename: zebra
        packagename: quagga