Skip to content
ATO Pathways
  Log In

Uninstall rpcbind Package

An XCCDF Rule

Description

The rpcbind utility maps RPC services to the ports on which they listen. RPC processes notify rpcbind when they start, registering the ports they are listening on and the RPC program numbers they expect to serve. The rpcbind service redirects the client to the proper port number so it can communicate with the requested service. If the system does not require RPC (such as for NFS servers) then this service should be disabled. The rpcbind package can be removed with the following command: 

$ sudo zypper remove rpcbind

Rationale

If the system does not require rpc based services, it is recommended that rpcbind be disabled to reduce the attack surface.

ID
xccdf_org.ssgproject.content_rule_package_rpcbind_removed
Severity
Low
References
Updated



Remediation - Puppet

include remove_rpcbind

class remove_rpcbind {
  package { 'rpcbind':
    ensure => 'purged',
  }

Remediation - Shell Script

# Remediation is applicable only in certain platforms
if [ ! -f /.dockerenv ] && [ ! -f /run/.containerenv ]; then

# CAUTION: This remediation script will remove rpcbind
#	   from the system, and may remove any packages
#	   that depend on rpcbind. Execute this

Remediation - Ansible

- name: Ensure rpcbind is removed
  package:
    name: rpcbind
    state: absent
  when: ansible_virtualization_type not in ["docker", "lxc", "openvz", "podman", "container"]
  tags: