Rules Related To 'glibc'

Component overview

Relevant packages:

Relevant groups:

None

Changelog:

No changes recorded.

Relevant rules:

Rule details

Package glibc Installed

package_glibc_installed

Description

The package glibc is installed on Linux by default, but the glibc version might not be sufficient for SAP. Please refer to SAP note of your Linux version for the minimum requirement on glibc. The glibc package can be installed with the following command:

$ sudo dnf install glibc

Rationale

The glibc package contains standard C and math libraries used by multiple programs on Linux. The glibc shipped with first release of each major Linux version is often not sufficient for SAP. An update is required after the first OS installation.

Name Service Switch does not use NIS

no_nis_in_nsswitch

Description

Each call to a function which retrieves data from a system database like the password or group database is handled by the Name Service Switch implementation in the GNU C library. The various services provided are implemented by independent modules, each of which naturally varies widely from the other. One of such modules is the nis module, which allows to get information from NIS servers.

Rationale

NIS service is insecure and should not be used.

Name Service Switch does not use Hesiod

no_hesiod_in_nsswitch

Description

Each call to a function which retrieves data from a system database like the password or group database is handled by the Name Service Switch implementation in the GNU C library. The various services provided are implemented by independent modules, each of which naturally varies widely from the other. One of such modules is the hesiod module, which allows to get information from special DNS records.

Rationale

This way of getting information for authentication is not secure. The communication can be spoofed and ensuring trust between the client and the DNS server is hard to achieve.