mediumservicesverified ✓rollback-safe
Ensure samba file server services are not in use
service-disable-smb · RHEL ≥ 8 · 1 impl
Description
The smb service should be stopped and masked unless required by the organization.
Rationale
Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.
Check → Remediate
Checkservice_state
- name:
- smb
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- smb
Framework references
CIS
rhel9 2.1.6rhel8 2.1.14rhel10 2.1.13
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#attack-surface