3.4.3 Ensure /etc/hosts.deny is configured

Information

The /etc/hosts.deny file specifies which IP addresses are not permitted to connect to the host. It is intended to be used in conjunction with the /etc/hosts.allow file.

Rationale:

The /etc/hosts.deny file serves as a failsafe so that any host not specified in /etc/hosts.allow is denied access to the system.

Solution

Run the following command to create /etc/hosts.deny :

# echo 'ALL: ALL' >> /etc/hosts.deny

Additional Information:

Contents of the /etc/hosts.deny file may include additional options depending on your network configuration.

See Also

https://workbench.cisecurity.org/files/3738

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(5)

Plugin: Unix

Control ID: 50a1ac4318109733078e62fa69114c358731e7e2c0b8ec66991662a8267fe2f4