Skip to content

Disable ypserv Service

An XCCDF Rule

Description

The ypserv service, which allows the system to act as a client in a NIS or NIS+ domain, should be disabled. The ypserv service can be disabled with the following command:

$ sudo systemctl mask --now ypserv.service

Rationale

Disabling the ypserv service ensures the system is not acting as a client in a NIS or NIS+ domain. This service should be disabled unless in use.

ID
xccdf_org.ssgproject.content_rule_service_ypserv_disabled
Severity
Medium
Updated



Remediation - Puppet

include disable_ypserv

class disable_ypserv {
  service {'ypserv':
    enable => false,
    ensure => 'stopped',

Remediation - OS Build Blueprint


[customizations.services]
masked = ["ypserv"]

Remediation - Ansible

- name: Gather the package facts
  package_facts:
    manager: auto
  tags:
  - disable_strategy
  - low_complexity