Skip to content
Log In

Disable RPC ID Mapping Service (rpcidmapd)

An XCCDF Rule

Description

The rpcidmapd service is used to map user names and groups to UID and GID numbers on NFSv4 mounts. If NFS is not in use on the local system then this service should be disabled. The rpcidmapd service can be disabled with the following command: 
$ sudo systemctl mask --now rpcidmapd.service
ID
xccdf_org.ssgproject.content_rule_service_rpcidmapd_disabled
Severity
Unknown
Updated

Remediation Templates

A Puppet Snippet

include disable_rpcidmapd
class disable_rpcidmapd {
  service {'rpcidmapd':
    enable => false,
    ensure => 'stopped',
  }
}

An Ansible Snippet

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - disable_strategy
  - low_complexity

A Shell Script

# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel; then
SYSTEMCTL_EXEC='/usr/bin/systemctl'
"$SYSTEMCTL_EXEC" stop 'rpcidmapd.service'
"$SYSTEMCTL_EXEC" disable 'rpcidmapd.service'
"$SYSTEMCTL_EXEC" mask 'rpcidmapd.service'

A Kubernetes Patch

apiVersion: machineconfiguration.openshift.io/v1
kind: MachineConfig
spec:
  config:
    ignition:
      version: 3.1.0

OS Build Blueprint

[customizations.services]
masked = ["rpcidmapd"]

script:kickstart

service disable rpcidmapd