Disable Dovecot Service
An XCCDF Rule
Description
The dovecot service can be disabled with the following command:
$ sudo systemctl mask --now dovecot.service
Rationale
Running an IMAP or POP3 server provides a network-based avenue of attack, and should be disabled if not needed.
- ID
- xccdf_org.ssgproject.content_rule_service_dovecot_disabled
- Severity
- Unknown
- Updated
Remediation - OS Build Blueprint
[customizations.services]
disabled = ["dovecot"]
Remediation - Ansible
- name: Block Disable service dovecot
block:
- name: Disable service dovecot
block:
Remediation - Puppet
include disable_dovecot
class disable_dovecot {
service {'dovecot':
enable => false,
ensure => 'stopped',