3.4.3 Ensure /etc/hosts.deny is configured

Information

The /etc/hosts.deny file specifies which IP addresses are not permitted to connect to the host. It is intended to be used in conjunction with the /etc/hosts.allow file. The /etc/hosts.deny file serves as a failsafe so that any host not specified in /etc/hosts.allow is denied access to the system.

Solution

Run the following command to create /etc/hosts.deny: # echo 'ALL: ALL' >> /etc/hosts.deny

See Also

https://workbench.cisecurity.org/files/1866

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(5), CSCv6|6.3

Plugin: Unix

Control ID: 991c91145a665db9a85272de3494110ad4588aa1f452d85aaddfe390f5d8383d