{"description": "The nftables service allows for the loading of nftables rulesets during boot,\nor starting on the nftables service\n\nThe <code>nftables</code> service can be enabled with the following command:\n<pre>$ sudo systemctl enable nftables.service</pre>", "rationale": "The nftables service restores the nftables rules from the rules files referenced\nin the <tt>/etc/sysconfig/nftables.conf</tt> file during boot or the starting of\nthe nftables service", "severity": "medium", "references": {"cis": ["4.2.9"]}, "control_references": {"cis": ["4.2.9"]}, "components": [], "identifiers": {}, "ocil_clause": "the \"nftables\" service is disabled, masked, or not started.", "ocil": "\n\nRun the following command to determine the current status of the\n<code>nftables</code> service:\n<pre>$ sudo systemctl is-active nftables</pre>\nIf the service is running, it should return the following: <pre>active</pre>", "oval_external_content": null, "fixtext": "To enable the nftables service run the following command:\n\n$ sudo systemctl enable --now nftables", "checktext": "", "vuldiscussion": "", "srg_requirement": "", "warnings": [], "conflicts": [], "requires": [], "policy_specific_content": {}, "platform": "system_with_kernel and package[nftables] and service_disabled[firewalld]", "platforms": ["system_with_kernel and package[nftables] and service_disabled[firewalld]"], "sce_metadata": {"check-import": "stdout", "platform": ["multi_platform_all"], "environment": "any", "filename": "service_nftables_enabled.sh", "relative_path": "ubuntu2204/checks/sce/service_nftables_enabled.sh"}, "inherited_platforms": [], "cpe_platform_names": ["package_nftables_and_service_disabled_firewalld_and_system_with_kernel"], "inherited_cpe_platform_names": [], "bash_conditional": null, "fixes": {}, "title": "Verify nftables Service is Enabled", "definition_location": "/aptdata/openscap/scap-security-guide/linux_os/guide/system/network/network-nftables/service_nftables_enabled/rule.yml", "template": {"name": "service_enabled", "vars": {"servicename": "nftables"}, "backends": {}}}