mediumservicesverified ✓rollback-safe
Ensure ypserv package is not installed
pkg-ypserv-absent · RHEL ≥ 8 · 2 impls
Description
The ypserv (NIS server) package must not be installed. NIS transmits data including credentials in clear text.
Rationale
NIS is an insecure directory service that has been superseded by more secure alternatives like LDAP with TLS.
Check → Remediate
Checkpackage_state
- name:
- ypserv
- state:
- absent
Remediatepackage_absent
- name:
- ypserv
Framework references
STIG
V-257829 / RHEL-09-215030
NIST 800-53
CM-7SC-8IA-5
Live verification
rhel9:check
#package#nis#attack-surface