mediumservicesverified ✓rollback-safe
Ensure message access server services are not in use
service-disable-dovecot · RHEL ≥ 8 · 1 impl
Description
The dovecot service should be stopped and masked unless required by the organization.
Rationale
Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.
Check → Remediate
Checkservice_state
- name:
- dovecot
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- dovecot
Framework references
CIS
rhel9 2.1.8rhel10 2.1.8rhel8 2.1.8
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#attack-surface