mediumservicesverified ✓rollback-safe
Disable NFS server
service-disable-nfs · RHEL ≥ 8 · 1 impl
Description
The NFS (Network File System) server allows sharing of filesystems over the network. Unless required, this service should be disabled.
Rationale
NFS can expose sensitive data if misconfigured. Running an unnecessary NFS server increases the attack surface.
Check → Remediate
Checkservice_state
- name:
- nfs-server
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- nfs-server
Framework references
CIS
rhel8 2.1.9rhel9 2.1.9rhel10 2.1.9
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#nfs#attack-surface