Configure lockd to use static TCP port
An XCCDF Rule
Description
Configure the lockd daemon to use a static TCP port as
opposed to letting the RPC Bind service dynamically assign a port. Edit the
file /etc/sysconfig/nfs. Add or correct the following line:
LOCKD_TCPPORT=lockd-portWhere
lockd-port is a port which is not used by any other service on
your network.
Rationale
Restrict service to always use a given port, so that firewalling can be done effectively.
- ID
- xccdf_org.ssgproject.content_rule_nfs_fixed_lockd_tcp_port
- Severity
- Unknown
- References
- Updated