Detections
Analytics

1.118 OL08-00-010680

Information

For OL 8 systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.

GROUP ID: V-248634
RULE ID: SV-248634r991589

To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.

Solution

Configure OL 8 to use two or more name servers for DNS resolution.

By default, "NetworkManager" on OL 8 dynamically updates the "/etc/resolv.conf" file with the DNS settings from active "NetworkManager" connection profiles. However, this feature can be disabled to allow manual configurations.

If manually configuring DNS, edit the "/etc/resolv.conf" file to uncomment or add the two or more "nameserver" option lines with the IP address of local authoritative name servers.

If local host resolution is being performed, the "/etc/resolv.conf" file must be empty. An empty "/etc/resolv.conf" file can be created as follows:

$ sudo echo -n > /etc/resolv.conf

See Also

https://workbench.cisecurity.org/benchmarks/23791

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248634r991589_rule, STIG-ID|OL08-00-010680, Vuln-ID|V-248634

Plugin: Unix

Control ID: ac320d96217be3dbceb19a14c63a7b833a0ec357a43c9d05eddf566eebc8adbc