lownetworkverified ✓rollback-safe
Ensure nftables service is disabled when using firewalld
nftables-service-disabled · RHEL ≥ 8 · 2 impls
Description
When using firewalld as the firewall management tool, the nftables service should be disabled to avoid conflicts. Firewalld manages nftables rules directly.
Rationale
Running both firewalld and the nftables service can cause rule conflicts and unpredictable behavior. Choose one management interface and disable the other.
Check → Remediate
Checkservice_state
- name:
- nftables
- enabled:
- true
Remediateservice_enabled
- name:
- nftables
Framework references
CIS
rhel9 4.1.2
NIST 800-53
CM-6
Live verification
rhel9:check
#firewall#nftables#firewalld#service