Profile Applicability:
• Level 1
Description:
firewalld is a dynamic firewall manager that provides a flexible way to manage firewall rules and zones. Ensuring firewalld is installed allows for effective network traffic control and enhances system security.
Rationale:
Having firewalld installed enables administrators to implement granular firewall policies that protect against unauthorized network access.
Impact:
Pros:
Provides a modern, flexible firewall management tool.
Supports dynamic firewall rule changes without service disruption.
Cons
Installation alone does not guarantee secure configuration; proper setup is necessary.
Default Value:
firewalld may or may not be installed by default, depending on the Linux distribution.
Pre-requisites:
Root or sudo privileges to install packages.
Remediation:
Test Plan:
Using Linux command line:
1. Check if firewalld is installed:
RPM-based systems:
rpm -q firewalld
2. Confirm package presence.
Implementation Plan:
Using Linux command line:
Install firewalld if missing:
1. RPM-based:
yum install firewalld -y
2. Verify installation:
firewall-cmd --version
Backout Plan:
Using Linux command line:
1. Remove firewalld if needed:
RPM-based:
yum remove firewalld -y
2. Confirm removal.
References:
CIS Amazon Linux 2 Benchmark v3.0.0
firewalld Documentation