Uninstall ypserv Package
An XCCDF Rule
Description
Theypserv
package can be removed with the following command:
$ sudo yum erase ypserv
Rationale
The NIS service provides an unencrypted authentication service which does
not provide for the confidentiality and integrity of user passwords or the
remote session.
Removing the ypserv
package decreases the risk of the accidental
(or intentional) activation of NIS or NIS+ services.
- ID
- xccdf_org.ssgproject.content_rule_package_ypserv_removed
- Severity
- High
- References
- Updated
Remediation Templates
Anaconda Pre-Install Instructions
package --remove=ypserv
An Ansible Snippet
- name: Ensure ypserv is removed
package:
name: ypserv
state: absent
tags:
- CCE-27399-5
A Puppet Snippet
include remove_ypserv
class remove_ypserv {
package { 'ypserv':
ensure => 'purged',
}
}
A Shell Script
# CAUTION: This remediation script will remove ypserv
# from the system, and may remove any packages
# that depend on ypserv. Execute this
# remediation AFTER testing on a non-production
# system!