Detections
Analytics
OL08-00-010680 - For OL 8 systems using Domain Name Servers (DNS) resolution, at least two name servers must be configured.
Information
To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.Solution
Configure OL 8 to use two or more name servers for DNS resolution.By default, "NetworkManager" on OL 8 dynamically updates the "/etc/resolv.conf" file with the DNS settings from active "NetworkManager" connection profiles. However, this feature can be disabled to allow manual configurations.
If manually configuring DNS, edit the "/etc/resolv.conf" file to uncomment or add the two or more "nameserver" option lines with the IP address of local authoritative name servers.
If local host resolution is being performed, the "/etc/resolv.conf" file must be empty. An empty "/etc/resolv.conf" file can be created as follows:
$ sudo echo -n > /etc/resolv.conf
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Oracle_Linux_8_V2R8_STIG.zip
Item Details
Audit Name: DISA Oracle Linux 8 STIG v2r8
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-248634r991589_rule, STIG-ID|OL08-00-010680, Vuln-ID|V-248634
Plugin: Unix
Control ID: 52743142b71eb955ffde375b16eb62a39186b55a7e595d1d21b5d5e136f9b5c2