Detections
Analytics
GEN001375 - For systems using DNS resolution, at least two name servers must be configured
Information
To provide availability for name resolution services, multiple redundant name servers are mandated. A failure in name resolution could lead to the failure of security functions requiring name resolution, which may include time synchronization, centralized authentication, and remote system logging.Note - No DNS configuration found in /etc/nsswitch.conf.
Solution
Edit /etc/resolv.conf and add additional 'nameserver' lines until at least two are present.See Also
http://iasecontent.disa.mil/stigs/zip/U_RedHat_5_V1R18_STIG.zip
Item Details
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-22, CAT|III, CCI|CCI-001182, Group-ID|V-22331, Rule-ID|SV-37335r2_rule, STIG-ID|GEN001375, Vuln-ID|V-22331
Plugin: Unix
Control ID: 6c40316556c412786876a2834669be8c3661e010b374daeaaf226ef00055315b