linux cis检查

网络访问控制

禁用ipv6

查看ipv6是否开启

cat /proc/sys/net/ipv6/conf/all/disable_ipv6

0 返回0值

编辑vim /etc/sysctl.conf

#disable ipv6

net.ipv6.conf.all.disable_ipv6=1

net.ipv6.conf.default.disable_ipv6=1

net.ipv6.conf.lo.disable_ipv6=1

使脚本生效sysctl -p

再次查看ipv6 返回1值

cat /proc/sys/net/ipv6/conf/all/disable_ipv6

查看安装tcp_wrappers和tcp_wrappers_libs

rpm -qa | grep tcp

无安装用yum安装 yum install tcp_wrappers

https://blog.csdn.net/IT_DREAM_ER/article/details/52314704

hosts.allow和hosts.deny文件配置正确，已配置文件

https://www.cnblogs.com/lsdb/p/7095288.html