Skip to content

Name Service Switch does not use NIS

An XCCDF Rule

Description

Each call to a function which retrieves data from a system database like the password or group database is handled by the Name Service Switch implementation in the GNU C library. The various services provided are implemented by independent modules, each of which naturally varies widely from the other. One of such modules is the nis module, which allows to get information from NIS servers.

warning alert: Warning

This rule does not have remediation. Editing the /etc/nsswitch.conf incorrectly can disrupt access to the system.

Rationale

NIS service is insecure and should not be used.

ID
xccdf_org.ssgproject.content_rule_no_nis_in_nsswitch
Severity
Medium
References
Updated