Skip to content
ATO Pathways
  Log In

Disable ypserv Service

An XCCDF Rule

Description

The ypserv service, which allows the system to act as a client in a NIS or NIS+ domain, should be disabled. The ypserv service can be disabled with the following command: 

$ sudo systemctl mask --now ypserv.service

Rationale

Disabling the ypserv service ensures the system is not acting as a client in a NIS or NIS+ domain. This service should be disabled unless in use.

ID
xccdf_org.ssgproject.content_rule_service_ypserv_disabled
Severity
Medium
Updated



Remediation - OS Build Blueprint


[customizations.services]
disabled = ["ypserv"]

Remediation - Ansible

- name: Block Disable service ypserv
  block:

  - name: Disable service ypserv
    block:

Remediation - Puppet

include disable_ypserv

class disable_ypserv {
  service {'ypserv':
    enable => false,
    ensure => 'stopped',