Uninstall rpcbind Package
An XCCDF Rule
Description
The rpcbind utility maps RPC services to the ports on which they listen.
RPC processes notify rpcbind when they start, registering the ports they
are listening on and the RPC program numbers they expect to serve. The
rpcbind service redirects the client to the proper port number so it can
communicate with the requested service. If the system does not require RPC
(such as for NFS servers) then this service should be disabled.
The rpcbind package can be removed with the following command:
$ sudo zypper remove rpcbind
Rationale
If the system does not require rpc based services, it is recommended that rpcbind be disabled to reduce the attack surface.
- ID
- xccdf_org.ssgproject.content_rule_package_rpcbind_removed
- Severity
- Low
- References
- Updated
Remediation - Puppet
include remove_rpcbind
class remove_rpcbind {
package { 'rpcbind':
ensure => 'purged',
}
Remediation - Ansible
- name: Gather the package facts
package_facts:
manager: auto
tags:
- CCE-92467-0
- disable_strategy
Remediation - Shell Script
# Remediation is applicable only in certain platforms
if rpm --quiet -q kernel-default; then
# CAUTION: This remediation script will remove rpcbind
# from the system, and may remove any packages
# that depend on rpcbind. Execute this