mediumservicesverified ✓rollback-safe
Disable Squid proxy server
service-disable-squid · RHEL ≥ 8 · 1 impl
Description
Squid is a caching web proxy server. Unless the system is a designated proxy server, this service should be disabled.
Rationale
Running an unnecessary proxy server could allow unauthorized users to route traffic through the system or access internal resources.
Check → Remediate
Checkservice_state
- name:
- squid
- active:
- false
- enabled:
- false
Remediateservice_masked
- name:
- squid
Framework references
CIS
rhel8 2.1.18rhel9 2.1.17rhel10 2.1.17
NIST 800-53
CM-7
Live verification
rhel10:checkrhel8:checkrhel9:check
#service#networking#proxy#attack-surface