mediumservicesverified ✓rollback-safe
Ensure rsync services are not in use
service-disable-rsyncd · RHEL ≥ 8 · 1 impl
Description
The rsyncd service should be stopped and masked unless required by the organization.
Rationale
Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.
Check → Remediate
Checkservice_state
- name:
- rsyncd
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- rsyncd
Framework references
CIS
rhel9 2.1.13rhel8 2.1.13rhel10 2.1.12
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#attack-surface