lowservicesunverifiedrollback-safe
Ensure bind (DNS server) is not installed
package-bind-removed · RHEL ≥ 8 · 2 impls
Description
The bind package provides DNS server functionality. Unless the system is a designated DNS server, this package should not be installed.
Rationale
Running a DNS server increases the attack surface. DNS servers have been historically targeted for cache poisoning, amplification attacks, and other exploits. Remove if not required.
Check → Remediate
Checkpackage_state
- name:
- bind
- state:
- absent
Remediatepackage_absent
- name:
- bind
Framework references
NIST 800-53
CM-7
#package#dns#bind#attack-surface