highservicesverified ✓rollback-safe
Disable DNS server
service-disable-named · RHEL ≥ 8 · 1 impl
Description
The BIND DNS server provides name resolution services. Unless the system is a designated DNS server, this service should be disabled.
Rationale
Running an unnecessary DNS server could be exploited for DNS spoofing or amplification attacks.
Check → Remediate
Checkservice_state
- name:
- named
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- named
Framework references
CIS
rhel8 2.1.5rhel9 2.1.4rhel10 2.1.5
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#dns#attack-surface