From shawn at redhat.com Thu Aug 20 11:31:09 2015
Content-Type: multipart/mixed; boundary="===============3558218104361922576=="
MIME-Version: 1.0
From: Shawn Wells <shawn at redhat.com>
To: scap-security-guide at lists.fedorahosted.org
Subject: Re: [PATCH] brought WiFi prose into the present day * removed
 disabling WiFi from common Profile,
 added to server Profile * also added many line breaks
Date: Mon, 28 May 2012 16:34:10 -0400
Message-ID: <4FC3E142.1070202@redhat.com>
In-Reply-To: 1337901021-19620-2-git-send-email-blank@eclipse.ncsc.mil

--===============3558218104361922576==
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable

On 5/24/12 7:10 PM, Jeffrey Blank wrote:
> Signed-off-by: Jeffrey Blank<blank(a)eclipse.ncsc.mil>
> ---
>   rhel6/src/input/profiles/common.xml         |    1 -
>   rhel6/src/input/profiles/server.xml         |    1 +
>   rhel6/src/input/system/network/network.xml  |   36 +++++++++++++++++---=
--
>   rhel6/src/input/system/network/wireless.xml |   43 +++++++++++++++++---=
------
>   4 files changed, 56 insertions(+), 25 deletions(-)
>
> diff --git a/rhel6/src/input/profiles/common.xml b/rhel6/src/input/profil=
es/common.xml
> index e7b3fe3..a28794e 100644
> --- a/rhel6/src/input/profiles/common.xml
> +++ b/rhel6/src/input/profiles/common.xml
> @@ -63,7 +63,6 @@
>   <select idref=3D"set_sysctl_net_ipv4_tcp_syncookies" selected=3D"true"/>
>   <select idref=3D"set_sysctl_net_ipv4_conf_all_rp_filter" selected=3D"tr=
ue"/>
>   <select idref=3D"set_sysctl_net_ipv4_conf_default_rp_filter" selected=
=3D"true"/>
> -<select idref=3D"deactivate_wireless_interfaces" selected=3D"true"/>
>   <select idref=3D"disable_ipv6_module_loading" selected=3D"true"/>
>   <select idref=3D"set_sysctl_ipv6_default_accept_redirects" selected=3D"=
true"/>
>   <select idref=3D"enable_ip6tables" selected=3D"true"/>
> diff --git a/rhel6/src/input/profiles/server.xml b/rhel6/src/input/profil=
es/server.xml
> index ad808a7..c119ddb 100644
> --- a/rhel6/src/input/profiles/server.xml
> +++ b/rhel6/src/input/profiles/server.xml
> @@ -1,6 +1,7 @@
>   <Profile id=3D"server" extends=3D"common" xmlns=3D"http://checklists.ni=
st.gov/xccdf/1.1">
>   <title>Server Baseline</title>
>   <description>This profile is for RHEL 6 acting as a server.</descriptio=
n>
> +<select idref=3D"deactivate_wireless_interfaces" selected=3D"true"/>
>   <select idref=3D"disable_xwindows_with_runlevel" selected=3D"true"/>
>   <select idref=3D"packagegroup_xwindows_remove" selected=3D"true"/>
>   <select idref=3D"disable_dhcp_client" selected=3D"true"/>
> diff --git a/rhel6/src/input/system/network/network.xml b/rhel6/src/input=
/system/network/network.xml
> index ad07930..a90b142 100644
> --- a/rhel6/src/input/system/network/network.xml
> +++ b/rhel6/src/input/system/network/network.xml
> @@ -16,23 +16,37 @@ networks.</description>
>
>   <Rule id=3D"network_disable_unused_interfaces">
>   <title>Disable Unused Interfaces</title>
> -<description>If the system does not require network communications but s=
till needs to use the loopback interface, remove all files of the form<tt>i=
fcfg-interface</tt>  except for<tt>ifcfg-lo</tt>  from<tt>/etc/sysconfig/ne=
twork-scripts</tt>:
> +<description>If the system does not require network communications but s=
till
> +needs to use the loopback interface, remove all files of the form
> +<tt>ifcfg-interface</tt>  except for<tt>ifcfg-lo</tt>  from
> +<tt>/etc/sysconfig/network-scripts</tt>:
>   <pre># rm /etc/sysconfig/network-scripts/ifcfg-interface</pre>
> -If the system is a standalone machine with no need for network access or=
 even communication over the loopback device, then disable this service wit=
h the following:
> +If the system is a standalone machine with no need for network access or=
 even
> +communication over the loopback device, then disable this service with t=
he
> +following command:
>   <pre># chkconfig network off</pre>
>   </description>
> -<rationale>The network interfaces expand the attack surface of a system.=
 If they are not needed they should be disabled.</rationale>
> +<rationale>The network interfaces expand the attack surface of a system.
> +Although unusual, if they are not needed they should be disabled.
> +</rationale>
>   <!--<ident cce=3D"TODO" />-->
>   <!--TODO:MANUAL<oval id=3D"network_disable_unused_interfaces" />-->
> -<ref nist=3D"CM-6, CM-7" />
> -</Rule>
> +<ref nist=3D"CM-6, CM-7" />  </Rule>
>
>   <Rule id=3D"network_disable_zeroconf">
>   <title>Disable Zeroconf Networking</title>
> -<description>Zeroconf networking allows the system to assign itself an I=
P address and engage in IP communication without a statically-assigned addr=
ess or even a DHCP server. Automatic address assignment via Zeroconf (or DH=
CP) is not recommended. To disable Zeroconf automatic route assignment in t=
he 169.245.0.0 subnet, add or correct the following line in<tt>/etc/sysconf=
ig/network</tt>:
> +<description>Zeroconf networking allows the system to assign itself an IP
> +address and engage in IP communication without a statically-assigned add=
ress or
> +even a DHCP server. Automatic address assignment via Zeroconf (or DHCP) =
is not
> +recommended. To disable Zeroconf automatic route assignment in the 169.2=
45.0.0
> +subnet, add or correct the following line in<tt>/etc/sysconfig/network</=
tt>:
>   <pre>NOZEROCONF=3Dyes</pre>
>   </description>
> -<rationale>Zeroconf addresses are in the network 169.254.0.0. The networ=
king scripts add entries to the system=C3=A2=E2=82=AC=E2=84=A2s routing tab=
le for these addresses. Zeroconf address assignment commonly occurs when th=
e system is configured to use DHCP but fails to receive an address assignme=
nt from the DHCP server.</rationale>
> +<rationale>Zeroconf addresses are in the network 169.254.0.0. The networ=
king
> +scripts add entries to the system=C3=A2=E2=82=AC=E2=84=A2s routing table=
 for these addresses. Zeroconf
> +address assignment commonly occurs when the system is configured to use =
DHCP
> +but fails to receive an address assignment from the DHCP server.
> +</rationale>
>   <ident cce=3D"CCE-14054-1" />
>   <oval id=3D"sysconfig_nozeroconf_yes" />
>   <ref nist=3D"CM-6, CM-7" />
> @@ -40,10 +54,14 @@ If the system is a standalone machine with no need fo=
r network access or even co
>
>   <Rule id=3D"network_sniffer_disabled">
>   <title>Ensure System is Not Acting as a Network Sniffer</title>
> -<description>The system should not be acting as a network sniffer, which=
 can capture all traffic on the network to which it is connected.  Run the =
following to determine if any interface is running in promiscuous mode:
> +<description>The system should not be acting as a network sniffer, which=
 can
> +capture all traffic on the network to which it is connected.  Run the fo=
llowing
> +to determine if any interface is running in promiscuous mode:
>   <pre>$ ip link | grep PROMISC</pre>
>   </description>
> -<rationale>If any results are returned then a sniffing process (such as =
tcpdump or wireshark) is likely to be using the interface and this should b=
e investigated.
> +<rationale>If any results are returned then a sniffing process (such as =
tcpdump
> +or wireshark) is likely to be using the interface and this should be
> +investigated.
>   </rationale>
>   <ident cce=3D"CCE-15013-6" />
>   <oval id=3D"network_sniffer_disabled" />
> diff --git a/rhel6/src/input/system/network/wireless.xml b/rhel6/src/inpu=
t/system/network/wireless.xml
> index 923212a..b69f7be 100644
> --- a/rhel6/src/input/system/network/wireless.xml
> +++ b/rhel6/src/input/system/network/wireless.xml
> @@ -1,22 +1,18 @@
>   <Group id=3D"network-wireless">
>   <title>Wireless Networking</title>
>   <description>Wireless networking (sometimes referred to as 802.11
> -or Wi-Fi) presents a serious security risk to sensitive or
> +or WiFi) can present a security risk to sensitive or
>   classified systems and networks. Wireless networking hardware is
>   much more likely to be included in laptop or portable systems than
> -desktops or servers. See Section 3.3.14 for information on
> -Bluetooth wireless support. Bluetooth serves a different purpose
> -and possesses a much shorter range, but it still presents serious
> -security risks.
> +desktops or servers.
>   <br /><br />
> -Removal of hardware is the only way to absolutely ensure that
> -the wireless capability remains disabled. If it is completely
> -impractical to remove the wireless hardware, and site policy still
> -allows the device to enter sensitive spaces, every effort to
> -disable the capability via software should be made. In general,
> -acquisition policy should include provisions to prevent the
> -purchase of equipment that will be used in sensitive spaces and
> -includes wireless capabilities.</description>
> +Removal of hardware provides the greatest assurance that the wireless
> +capability remains disabled.  Acquisition policies often includes provis=
ions to
> +prevent the purchase of equipment that will be used in sensitive spaces =
and
> +includes wireless capabilities.  If it is impractical to remove the wire=
less
> +hardware, and policy permits the device to enter sensitive spaces, effor=
ts
> +should instead focus on disabling wireless capability via software.
> +</description>
>
>   <Group id=3D"wireless_software">
>   <title>Disable Wireless Through Software Configuration</title>
> @@ -29,7 +25,14 @@ devices.</description>
>
>   <Rule id=3D"wireless_disable_in_bios">
>   <title>Disable Wireless in BIOS</title>
> -<description>Some systems that include built-in wireless support offer t=
he ability to disable the device through the BIOS. This is system-specific;=
 consult your hardware manual or explore the BIOS setup during boot.</descr=
iption>
> +<description>Some systems that include built-in wireless support offer t=
he
> +ability to disable the device through the BIOS. This is system-specific;
> +consult your hardware manual or explore the BIOS setup during
> +boot.</description>
> +<rationale>Disabling wireless support in the BIOS prevents easy
> +activation of the wireless interface, generally requiring administrators
> +to reboot the system first.
> +</rationale>
>   <ident cce=3D"3628-5" />
>   <!--TODO:OCIL<oval id=3D"wireless_disable_in_bios" />-->
>   <ref nist=3D"CM-7" />
> @@ -56,6 +59,10 @@ disable the interface for future boots, remove the app=
ropriate
>   interface file from<tt>/etc/sysconfig/network-scripts</tt>:
>   <pre># rm /etc/sysconfig/network-scripts/ifcfg-interface</pre>
>   </description>
> +<rationale>Wireless networking allows attackers within physical proximit=
y to
> +launch network-based attacks against systems, including those against lo=
cal LAN
> +protocols which were not designed with security in mind.
> +</rationale>
>   <ident cce=3D"4276-2" />
>   <oval id=3D"wireless_disable_interfaces" />
>   <ref nist=3D"CM-7" />
> @@ -63,9 +70,15 @@ interface file from<tt>/etc/sysconfig/network-scripts<=
/tt>:
>
>   <Rule id=3D"wireless_disable_drivers">
>   <title>Disable Wireless Drivers</title>
> -<description>Removing the kernel drivers that provide support for wirele=
ss Ethernet devices will prevent users from easily activating the devices. =
To remove the wireless drivers from the system:
> +<description>Removing the kernel drivers that provide support for wirele=
ss
> +Ethernet devices will prevent users from easily activating the devices. =
To
> +remove the wireless drivers from the system:
>   <pre># rm -r /lib/modules/<i>kernelversion(s)</i>/kernel/drivers/net/wi=
reless</pre>
>   </description>
> +<rationale>Removing the wireless kernel drivers makes it slightly more d=
ifficult for
> +an administrator or malware to activate a wireless interface, by introdu=
cing
> +the need to install such a driver first.
> +</rationale>
>   <warning category=3D"general">This command must also be repeated every =
time the kernel is upgraded.</warning>
>   <ident cce=3D"4170-7" />
>   <oval id=3D"wireless_disable_drivers" />
>



Ack



--===============3558218104361922576==
Content-Type: text/html
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="attachment.html"
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--===============3558218104361922576==--