CCE-90887-1Platform: rhel7,centos7 | Date: (C)2017-06-29 (M)2022-10-10 |
Disable Zeroconf Networking
Zeroconf networking allows the system to assign itself an IP
address and engage in IP communication without a statically-assigned address or
even a DHCP server. Automatic address assignment via Zeroconf (or DHCP) is not
recommended. To disable Zeroconf automatic route assignment in the 169.254.0.0
subnet, add or correct the following line in '/etc/sysconfig/network':
'NOZEROCONF=yes'
Parameter:
Technical Mechanism:
Zeroconf addresses are in the network 169.254.0.0. The networking
scripts add entries to the system's routing table for these addresses. Zeroconf
address assignment commonly occurs when the system is configured to use DHCP
but fails to receive an address assignment from the DHCP server.
Fix:
echo "NOZEROCONF=yes" >> /etc/sysconfig/network
CCSS Severity: | CCSS Metrics: |
CCSS Score : | Attack Vector: |
Exploit Score: | Attack Complexity: |
Impact Score: | Privileges Required: |
Severity: | User Interaction: |
Vector: | Scope: |
| Confidentiality: |
| Integrity: |
| Availability: |
| |
References: Resource Id | Reference |
---|
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:30547 |
SCAP Repo OVAL Definition | oval:org.secpod.oval:def:31270 |