openstack/ansible-hardening
Code Issues Proposed changes
ansible-hardening/doc/metadata/rhel7/RHEL-07-040820.rst
Major Hayden 9c7b9239c5 [Docs] Exception for firewalld config 
This patch refers deployers to more documentation and provides
recommendations for more specific firewall rules.

Implements: blueprint security-rhel7-stig
Change-Id: Ie6601b3038256e067e2307fd86ae9d6812c07783
2016-12-08 09:17:41 -06:00

427 B
Raw Blame History

---id: RHEL-07-040820 status: exception - manual intervention tag: misc ---

The firewalld service is optionally enabled and configured in the tasks for another STIG control:

  • stig-RHEL-07-040290

Deployers should review their firewalld ruleset regularly to ensure that each firewall rule is specific as possible. Each rule should allow the smallest number of hosts to access the smallest number of services.