← Rules Catalog
mediumservicesverified rollback-safe

Ensure nis server services are not in use

service-disable-ypserv · RHEL ≥ 8 · 1 impl

Description

The ypserv service should be stopped and masked unless required by the organization.

Rationale

Unnecessary services increase the attack surface. Disabling unused services reduces the number of potential entry points.

Check → Remediate

Checkservice_state
name:
ypserv
active:
false
enabled:
false
Remediateservice_masked
name:
ypserv

Framework references

CIS

rhel9 2.1.10rhel8 2.1.10

NIST 800-53

CM-7

Live verification

rhel8:checkrhel9:check
#service#attack-surface