Uninstall ypserv Package
An XCCDF Rule
Description
The ypserv package can be removed with the following command:
$ sudo dnf erase ypserv
Rationale
The NIS service provides an unencrypted authentication service which does
not provide for the confidentiality and integrity of user passwords or the
remote session.
Removing the ypserv package decreases the risk of the accidental
(or intentional) activation of NIS or NIS+ services.
- ID
- xccdf_org.ssgproject.content_rule_package_ypserv_removed
- Severity
- High
- References
- Updated
Remediation - Anaconda Pre-Install Instructions
package --remove=ypserv
Remediation - Ansible
- name: Ensure ypserv is removed
package:
name: ypserv
state: absent
tags:
- NIST-800-53-CM-6(a)
Remediation - Puppet
include remove_ypserv
class remove_ypserv {
package { 'ypserv':
ensure => 'purged',
}
Remediation - Shell Script
# CAUTION: This remediation script will remove ypserv
# from the system, and may remove any packages
# that depend on ypserv. Execute this
# remediation AFTER testing on a non-production
# system!