← Rules Catalog
mediumservicesverified rollback-safe

Ensure message access server services are not in use

service-disable-dovecot · RHEL ≥ 8 · 1 impl

Description

The dovecot service should be stopped and masked unless required by the organization.

Rationale

Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.

Check → Remediate

Checkservice_state
name:
dovecot
active:
false
enabled:
false
Remediateservice_masked
name:
dovecot

Framework references

CIS

rhel9 2.1.8rhel10 2.1.8rhel8 2.1.8

NIST 800-53

CM-7

Live verification

rhel10:checkrhel8:checkrhel9:check
#service#attack-surface