Detections
Analytics

3.5.1.4 Ensure firewalld service enabled and running

Information

firewalld.service enables the enforcement of firewall rules configured through firewalld

Ensure that the firewalld.service is enabled and running to enforce firewall rules configured through firewalld

Solution

Run the following command to unmask firewalld

# systemctl unmask firewalld

Run the following command to enable and start firewalld

# systemctl --now enable firewalld

Impact:

Changing firewall settings while connected over network can result in being locked out of the system.

See Also

https://workbench.cisecurity.org/benchmarks/8415

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, CSCv7|9.4, Rule-ID|SV-204604r603261_rule, STIG-ID|RHEL-07-040520, Vuln-ID|V-204604

Plugin: Unix

Control ID: ab20230af790ba31b649bcab91cfa746b375b2530d4f38aa2a4a8327649f32de