Rules Related To 'kea'

Component overview

Relevant packages:

Relevant groups:

None

Changelog:

No changes recorded.

Relevant rules:

Rule details

Uninstall kea Package

package_kea_removed

Description

If the system does not need to act as a DHCP server, the kea package can be uninstalled.

Rationale

Removing the DHCP server ensures that it cannot be easily or accidentally reactivated and disrupt network operation.

Disable kea-dhcp4-server Service

service_kea_dhcp4_server_disabled

Description

The kea-dhcp4-server service should be disabled on any system that does not need to act as a DHCPv4 server. The kea-dhcp4-server service can be disabled with the following command:

$ sudo systemctl mask --now kea-dhcp4-server.service

Rationale

Unmanaged or unintentionally activated DHCP servers may provide faulty information to clients, interfering with the operation of a legitimate site DHCP server if there is one.

Disable kea-dhcp6-server Service

service_kea_dhcp6_server_disabled

Description

The kea-dhcp6-server service should be disabled on any system that does not need to act as a DHCPv6 server. The kea-dhcp6-server service can be disabled with the following command:

$ sudo systemctl mask --now kea-dhcp6-server.service

Rationale

Unmanaged or unintentionally activated DHCP servers may provide faulty information to clients, interfering with the operation of a legitimate site DHCP server if there is one.

Disable kea-dhcp-ddns-server Service

service_kea_dhcp_ddns_server_disabled

Description

The kea-dhcp-ddns-server service should be disabled on any system that does not need to act as a DHCP Dynamic DNS update server. The kea-dhcp-ddns-server service can be disabled with the following command:

$ sudo systemctl mask --now kea-dhcp-ddns-server.service

Rationale

Unmanaged or unintentionally activated DHCP servers may provide faulty information to clients, interfering with the operation of a legitimate site DHCP server if there is one.