An XCCDF Group - A logical subset of the XCCDF Benchmark
firewalld
rsync-daemon
$ sudo dnf remove rsync-daemon
rsyncd
$ sudo systemctl mask --now rsyncd.service
xinetd
$ sudo dnf remove xinetd
rexec
rsh-server
disable
yes
/etc/xinetd.d/rexec
$ sudo systemctl mask --now rexec.socket
rlogin
/etc/xinetd.d/rlogin
$ sudo systemctl mask --now rlogin.socket
rsh
/etc/xinetd.d/rsh
$ sudo systemctl mask --now rsh.socket
shosts.equiv
$ sudo rm /[path]/[to]/[file]/shosts.equiv
/etc/hosts.equiv
~/.rhosts
$ sudo rm /etc/hosts.equiv
$ rm ~/.rhosts
~/.shosts
$ sudo find / -name '.shosts' -type f -delete
telnet-server
$ sudo dnf remove telnet-server
telnet
$ sudo systemctl mask --now telnet.socket
tftp-server
$ sudo dnf remove tftp-server
tftp
$ sudo systemctl show tftp | grep ExecStart= ExecStart={ path=/usr/sbin/in.tftpd ; argv[]=/usr/sbin/in.tftpd -s /var/lib/tftpboot ; ignore_errors=no ; start_time=[n/a] ; stop_time=[n/a] ; pid=0 ; code=(null) ; status=0/0 }e
ExecStart
-s
ExecStart=/usr/sbin/in.tftpd -s