mediumservicesverified ✓rollback-safe
Disable rpcbind service
service-disable-rpcbind · RHEL ≥ 8 · 1 impl
Description
The rpcbind service maps RPC services to the ports they listen on. Unless NFS or other RPC services are required, this should be disabled.
Rationale
rpcbind is required for NFS and other RPC-based services. If these are not needed, rpcbind exposes unnecessary attack surface.
Check → Remediate
Checkservice_state
- name:
- rpcbind
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- rpcbind
Framework references
CIS
rhel8 2.1.12rhel9 2.1.12rhel10 2.1.11
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#rpc#attack-surface