Disable ypbind Service
An XCCDF Rule
Description
The ypbind
service, which allows the system to act as a client in
a NIS or NIS+ domain, should be disabled.
The ypbind
service can be disabled with the following command:
$ sudo systemctl mask --now ypbind.service
Rationale
Disabling the ypbind
service ensures the system is not acting
as a client in a NIS or NIS+ domain. This service should be disabled
unless in use.
- ID
- xccdf_org.ssgproject.content_rule_service_ypbind_disabled
- Severity
- Medium
- References
- Updated
Remediation - OS Build Blueprint
[customizations.services]
disabled = ["ypbind"]
Remediation - Puppet
include disable_ypbind
class disable_ypbind {
service {'ypbind':
enable => false,
ensure => 'stopped',
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then
SYSTEMCTL_EXEC='/usr/bin/systemctl'
"$SYSTEMCTL_EXEC" stop 'ypbind.service'
"$SYSTEMCTL_EXEC" disable 'ypbind.service'
Remediation - Ansible
- name: Block Disable service ypbind
block:
- name: Disable service ypbind
block: