Detections
Analytics
SLES-12-030380 - The SUSE operating system must not respond to Internet Protocol version 4 (IPv4) Internet Control Message Protocol (ICMP) echoes sent to a broadcast address.
Information
Responding to broadcast (ICMP) echoes facilitates network mapping and provides a vector for amplification attacks.Solution
Configure the SUSE operating system to the required kernel parameter by adding the following line to '/etc/sysctl.conf' (or modify the line to have the required value):net.ipv4.icmp_echo_ignore_broadcasts = 1
Run the following command to apply this value:
# sysctl --system
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_SLES_12_V3R4_STIG.zip
Item Details
Audit Name: DISA SLES 12 STIG v3r4
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-217290r991589_rule, STIG-ID|SLES-12-030380, STIG-Legacy|SV-92187, STIG-Legacy|V-77491, Vuln-ID|V-217290
Plugin: Unix
Control ID: ce26be9762796adc93af9c116f81a8db48b68160562dd89d08e4c9c217edc418