mediumservicesverified ✓rollback-safe
Ensure avahi daemon services are not in use
service-disable-avahi · RHEL ≥ 8 · 1 impl
Description
The avahi-daemon service should be stopped and masked unless required by the organization.
Rationale
Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.
Check → Remediate
Checkservice_state
- name:
- avahi-daemon
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- avahi-daemon
Framework references
CIS
rhel9 2.1.2rhel8 2.1.2rhel10 2.1.2
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#attack-surface